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strategic  discussion  on  cyber  is  no  longer  an  academic  dialogue, 


and  the  associated  technology  is  no  longer  the  realm  of  indus- 


-Z.  -Xdry  or  government  development  labs.  The  "defense”  in  the  cy¬ 
ber  domain  is  a  national  imperative;  increasingly  complex  challenges 
force  industrial  and  governmental  seniors  to  expand  collaborative  ef¬ 
forts  to  address  these  challenges.  Corporations  across  the  globe  are  le¬ 
veraging  the  cyber  domain  to  deliver  goods  and  services  more  quickly 
and  cheaply  while  balancing  the  need  to  protect  the  personal  informa¬ 
tion  that  customers  entrust  to  them.  Likewise,  military  commanders  in¬ 
creasingly  rely  on  integrated  cyber  capabilities  to  command  and  control 
and  generate  effects  on  the  battlefield,  both  kinetic  and  nonkinetic. 
Safeguarding  critical  data,  while  allowing  immediate  access  without  in¬ 
terception  or  manipulation,  is  the  key  to  mission  success. 
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On  7  November  2012,  two  of  our  nation’s  senior  cyber  leaders,  Maj 
Gen  Suzanne  Vautrinot,  commander  of  TWenty- Fourth  Air  Force  and 
Air  Forces  Cyber,  and  Mr.  Charles  Beard,  chief  information  officer  and 
senior  vice  president  of  Science  Applications  International  Corpora¬ 
tion  (SAIC)  sat  down  for  a  conversation.  During  this  discussion,  Mr. 
Beard  recounted  a  journey  of  his  efforts  to  reduce  his  company's  cy¬ 
ber-attack  surface  and  create  a  corporate  environment  resulting  in  a 
single  enterprise  information  technology  (IT)  solution,  and  Major  Gen¬ 
eral  Vautrinot  not  only  articulated  similarities  in  the  Air  Force's  ven¬ 
ture  to  defend  the  nation  in  cyberspace  but  also  focused  on  how  both 
the  Air  Force  and  industry  can  apply  the  lessons  learned  from  suc¬ 
cesses  like  SAIC's  migration  as  they  continue  to  move  toward  a  more 
homogeneous  cybersecurity  posture. 

With  their  consent,  we  would  like  to  share  a  private  dialogue  be¬ 
tween  recognized  and  mutually  respected  colleagues  and  partners  in 
this  dynamic  domain.  Additionally,  interlaced  into  this  conversation 
are  contributions  from  each  of  TWenty-Fourth  Air  Force’s  operational 
cyberspace  wings,  which  expound  upon  key  discussion  points  and 
highlight  current  efforts  to  operationalize  and  normalize  the  cyber¬ 
space  domain. 

Vautrinot:  Not  surprisingly,  your  efforts  resonate,  and  there  is  a  true 
similarity  of  experience  in  this  area.  You've  taken  what  were  signifi¬ 
cantly  diverse  elements  in  a  corporation  and  completely  changed  the 
dynamic— first  organizationally  and  then  technologically.  I'm  inter¬ 
ested  in  which  organizational  changes  you  believe  were  most  essential 
to  that  success;  I'd  like  to  leverage  those  changes  toward  our  shared  re¬ 
sponsibility  in  this  changing  global  environment. 

Beard:  Shared  responsibility  is  correct.  As  we  looked  at  cyber,  we  rec¬ 
ognized  that  the  governance  model  had  to  change.  We  grew  up  as 
10,000  independent  offices,  and  while  that  has  its  advantages  from  a 
market-development  and  a  customer-responsiveness  perspective,  it 
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has  its  drawbacks  from  an  enterprise  IT  governance  and  scale  perspec¬ 
tive.  We  needed  strategic  agility  to  engage  in  multiple  global  markets 
and  in  an  increasingly  hostile  computer  environment.  The  brst  step 
was  to  debne  and  stabilize  the  environment,  and  that  meant  changing 
the  way  we  thought  about  IT. 

Vautrinot:  In  the  military,  major  commands  or  functional  organiza¬ 
tions  might  be  considered  in  the  same  way— all  talented  but  very  dis¬ 
crete  .  .  .  the  description  “cylinders  of  excellence”  comes  to  mind. 

From  a  military  operations  stance,  this  makes  sense,  but  it  presents 
challenges  when  addressing  threats  and  risk  from  a  cyberspace  per¬ 
spective.  Since  information  technology  and  communications  grew  up 
in  a  decentralized  fashion,  there's  an  apparent  inertia  toward  retain¬ 
ing  that  decentralized  approach.  Yet,  you've  demonstrated  the  neces¬ 
sity  in  creating  an  enterprise  solution  to  best  operate  what  is  now  a 
cyber  enterprise. 

Beard:  The  first  step  for  us  was  to  make  that  connection  and  make 
sure  we  had  a  true  enterprise  view  of  the  environment  and  begin  to 
operate  it  as  an  enterprise  asset— irrespective  of  how  it  originated.  As 
the  next  action,  we  began  to  work  with  government  to  talk  about  the 
need  to  share  threat  information  and  improve  our  cyber  posture.  We 
[SAIC]  operate  IT  environments  on  behalf  of  the  government.  We  have 
client  information  on  our  networks,  and  we  take  the  responsibility  of 
stewardship  very  seriously.  At  the  same  time,  however,  we  are  a  pub¬ 
licly  traded  company  and  operate  on  a  global  basis.  We  couldn't  just 
take  a  US-centric  view  of  how  we  were  going  to  solve  this  problem 
anymore  than  the  Air  Force  could  take  such  a  position.  We  had  to 
change  the  intellectual  reference  for  a  lot  of  people  when  it  came  to 
governance  and  what  it  really  meant  as  a  multinational  corporation  to 
address  this  issue  of  cyber. 

Vautrinot:  In  air  and  space  domains,  we  had  the  advantage  of  develop¬ 
ing  unique  and  often  superior  or  specialized  systems:  fifth-generation 
transitioning  to  sixth-generation  aircraft  and  cutting-edge  satellites  .  .  . 
inherently  unique.  It  was  always  about  the  military  systems.  Yet  in  cy- 
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berspace,  it’s  a  global,  interconnected  environment.  We  share  the  same 
man-made  environment,  and  industry  is  at  that  “cutting  edge.”  The 
military  can't  afford— technically  or  financially— to  respond  indepen¬ 
dently.  We  need  shared  responsibility— industry,  government,  aca¬ 
demia,  international  partners— in  altering  the  environment  to  our  col¬ 
lective  advantage  and  holding  each  other  accountable  for  success.  In 
military  parlance,  we  can  change  the  domain  to  provide  freedom  of 
movement  to  our  allies  while  denying  our  adversaries  the  same.  We're 
all  working  in  the  same  space  although  perhaps  we  need  to  calculate 
risk  and  mission  response  a  bit  differently. 

Beard :  It's  all  about  risk  management  and  measured  response.  I  go 
back  to  my  Strategic  Air  Command  days,  where  we  operated  in  the  nu¬ 
clear  domain.  While  the  mission  of  deterrence  was  clear,  the  mission 
of  strike  was  equally  well  understood.  Preparing  for  both  was  the  order 
of  the  day.  Unlike  the  other  domains  within  the  military— ground,  air, 
sea,  and  space— force  projection  and  domination  in  the  cyber  domain 
are  very  difficult.  You  are  running  on  shared  infrastructure  on  a  global 
basis,  and  the  adversary  often  has  an  equal  or  better  footing. 

Vautrinot:  I'm  seeing  a  similar  global  dynamic  in  our  support  to  re¬ 
motely  piloted  aircraft  missions.  In  order  to  provide  mission  assur¬ 
ance,  we  had  to  conduct  extensive  front-end  research  to  understand 
the  various  links  from  the  United  States  to  the  overseas  flight.  The  sys¬ 
tem  was  designed  with  roughly  180  touch  points,  many  of  which  are 
not  military  controlled,  across  several  different  networks,  including 
foreign  systems,  making  it  critical  to  establish  relationships  with  com¬ 
mercial  organizations  and  allies.  The  security  and  assurance  becomes 
a  tremendous  interdependency,  which  you  are  also  seeing  in  industry. 

Beard :  In  the  commercial  domain,  interdependency  equals  continuity 
of  operations  and  risk  management.  There  is  a  difference  in  the  way 
we  view  the  threat,  but  mission  assurance  for  a  commercial  company  is 
largely  driven  by  the  markets  and  geographies  in  which  it  operates  and 
the  type  of  operation  it  is  conducting.  The  fact  that  those  operations  are 
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conducted  on  globally  shared  infrastructure  is  an  important  context  for 
corporate  executives  to  understand  as  they  consider  risks. 

Vautrinot:  The  commanders  we  support  have  indicated  a  similar  im¬ 
perative  for  uninterrupted  access  to  trusted  and  verifiable  data.  Mis¬ 
sion  assurance  in  the  cyber  domain  is  so  foundational  to  the  mission 
that  we  can't  afford  to  lose  the  capacity  to  communicate— it's  essential 
to  military  command  and  control. 

Beard:  That’s  exactly  right.  A  company  can  have  the  greatest  capa¬ 
bilities  in  the  world,  but  if  it  cannot  operate  in  the  digital  domain  and 
if  it  cannot  sustain  uninterrupted  access  to  the  energy  and  communi¬ 
cations  infrastructure,  it's  very  difficult  to  have  a  mission  profile  that 
survives.  So  we  see  command  and  control  very  much  alike  in  the  con¬ 
text  of  the  military  and  commercial  mission  because  we're  trying  to 
conduct  business  operations  around  the  globe.  If  I  cannot  provide  ac¬ 
cess  to  clean  communications  and  uninterrupted  energy,  then  the 
business  continuity  is  dramatically  impaired. 

Vautrinot:  At  a  corporate  level,  you  had  to  go  beyond  awareness.  Peo¬ 
ple  had  to  get  on  board,  understand  the  codependency,  and  see  its 
benefit  to  the  individual.  Having  the  discussion  on  a  smaller  scale 
makes  the  effect  tangible  and  makes  change  acceptable.  A  successful 
business  can  leverage  this  to  shift  a  company  in  new  directions.  Was 
the  realization  something  that  was  tailored  to  each  individual  and 
scaled,  or  did  senior  leadership  have  to  drive  enterprise  awareness  to 
change  organizational  culture? 

Beard:  At  SAIC,  we  are  fortunate  to  have  people  on  our  board  who 
have  walked  the  halls  of  government  and  industry,  who  understand 
that  this  threat  is  real.  So  what  we  began  to  do  was  translate  that  risk 
in  the  context  of  the  business.  I  think  what  you'll  find  is  that  various 
commercial  industries  are  further  along  in  that  understanding,  that 
maturity.  Certainly  the  financial  services  industry  has  understood  it 
for  many  years.  They  have  separate  risk  committees  on  their  boards  of 
directors,  and  it's  one  of  many  risks  that  they  must  consider.  You've 
got  other  industries,  like  energy,  where  the  awareness  is  ratcheting  up 
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even  further.  They  witness  the  threat  vector  changing  from  simple  in¬ 
telligence  gathering  to  operational  destruction,  as  indicated  by  the 
Saudi  Aramco  case.1  In  the  health-care  industry,  a  company  might 
spend  a  decade  and  $10  billion  building  out  a  product  or  a  new  drug, 
only  to  see  a  carbon  copy  of  that  product  launched  in  a  foreign  coun¬ 
try  a  year  before  they  get  approval  from  the  Food  and  Drug  Adminis¬ 
tration  [FDA],  All  their  intellectual  property  is  gone,  so  the  revenue 
stream  anticipated  by  that  company  for  that  product  for  the  next  10 
years  is  significantly  cut.  The  economic  imperatives  are  becoming  the 
clear  and  present  danger  to  the  national  economy  where  these  busi¬ 
nesses  operate,  but  many  companies  still  don't  understand  cyber 
threats  and  their  possible  impacts,  both  physical  and  economic. 

Vautrinot:  There  is  similar  recognition  concerning  cyber  depen¬ 
dency.  However,  I’m  not  sure  there's  cognizance  on  the  level  of  depen¬ 
dency,  and  our  ability  to  conduct  all  missions— to  fly,  fight,  and  win  in 
air,  space,  and  cyberspace.  Our  challenge  as  we  move  forward  is  to  cre¬ 
ate  linkage  in  all  mission  elements  .  .  .  the  operational  tapestry  versus 
the  mission  threads.  As  we  expand  on  this  focus,  we  must  be  cognizant 
to  balance  these  operational  efforts  with  the  ability  to  maintain  and  de¬ 
fend  our  networks.  Under  the  TWenty-Fourth  Air  Force,  the  689th 
Combat  Communications  Wing  specializes  in  maintaining  this  equilib¬ 
rium  by  extending  cyber  capabilities  to  the  tactical  edge  in  support  of 
the  war  fighter  while  continuing  to  provide  defensible,  trusted  commu¬ 
nications  at  that  edge.2 

Beard:  The  fact  that  e-mail  is  routed  to  servers  beyond  your  com¬ 
pany  networks  and  possibly  national  borders— perhaps  to  countries 
that  have  lawful  intercept  laws  that  are  different  than  your  own— is 
simply  not  understood  by  the  casual  user.  We've  built  entire  businesses 
that  depend  on  the  cyber  domain,  but  we  don’t  really  understand  the 
security  challenges  associated  with  that  domain.  It  is  daunting  when 
you  begin  to  understand  what  the  impacts  really  could  be,  and  that  is 
why  leadership  is  so  critical  to  navigating  this  challenge,  and  the  end¬ 
less  extension  of  network  reliance. 
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Vautrinot:  In  the  current  budget  environment,  there's  a  complicating 
factor:  the  expected  resource  commitment  actually  closes  the  dialogue 
and  decision  space  before  options  can  be  explored.  The  complexity  of 
this  enterprise-level  transformation  becomes  its  own  kind  of  inertia.  If 
cyber  is  currently  disordered,  then  we're  caught  somewhere  between 
the  natural  "entropy”  of  the  domain  and  the  inertia  of  the  decision.  Did 
you  fight  that  on  the  industry  side? 

Beard:  I  recently  heard  an  attorney  suggest  that  corporate  directors 
should  not  be  better  informed  on  cybersecurity  risks  because  the  laws 
protect  them  on  things  for  which  they  are  not  educated.  I  found  that  to 
be  a  shortsighted  view.  I  think  in  the  context  of  commercial  industry- 
take  a  bank,  for  example,  a  public  utility,  a  pharmaceutical  life  sci¬ 
ences  company,  or  a  defense  contractor— the  foundation  of  these  busi¬ 
nesses  is  reputation  and  trust.  The  boards  of  those  companies,  with 
robust  risk-management  practices,  know  best  if  they're  in  an  informed 
position  to  adjudicate  those  risks.  To  us,  the  cyber  risk  may  be  the 
most  dominant  risk  that  we  think  they  face.  But  for  a  defense  contrac¬ 
tor,  perhaps  the  biggest  risk  they're  facing  is  that  they  have  people  in 
harm's  way.  A  financial  institution  may  be  facing  a  liquidity  crisis.  A 
pharmaceutical  company  may  be  concerned  about  achieving  FDA  ap¬ 
proval  to  meet  forecasted  sales  and  finding  the  counterfeit  versions  of 
their  products  selling  around  the  globe.  The  question  is  how  well  ar¬ 
ticulated  is  that  risk,  and  this  notion  that  we  can  just  build  a  fortress 
around  the  business  with  static  cyber  defenses  is  simply  the  digital 
version  of  the  Maginot  Line. 

Vautrinot:  Agree,  static  defenses  didn’t  work  in  World  War  II  and 
won't  work  in  the  cyber  environment.  That's  why  in  the  Air  Force, 
we've  been  focusing  on  a  proactive  defensive  posture.  Instead  of  wait¬ 
ing  until  an  adversary  penetrates  our  networks  to  assess  our  vulner¬ 
abilities,  we  have  created  specialized  teams  that  search  our  networks 
and  seek  out  those  vulnerabilities,  preferably  before  they  are  ex¬ 
ploited.  We  focus  on  identifying  and  defending  those  interfaces  that 
are  essential  to  mission  success— Gen  Keith  Alexander,  commander  of 
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US  Cyber  Command,  would  call  this  capability  "recon/counter-recon.” 
A  key  facet  of  this  defensive  effort  is  identifying  and  focusing  on  a 
commander's  prioritized  "defended  asset  list,”  those  critical  areas  that 
must  be  able  to  operate  through  a  contested  environment  or  attack. 
This  corresponds  directly  to  something  we  spoke  about  before:  linking 
our  efforts  to  the  operational  mission.  We  can  enter  a  network  envi¬ 
ronment  and  provide  the  commander  who  is  reliant  on  that  system 
with  timely,  accurate  decision  information.  Specifically,  can  he  rely  on 
the  network  system  to  successfully  accomplish  the  mission? 

This  proactive  posture  is  bolstered  by  the  information  and  threat 
vector  sharing  between  industry  and  government.  A  superb  example 
was  the  Department  of  Defense's  Voluntary  Defense  Industrial  Base 
Cyber  Security  /  Information  Assurance  Program,  an  agreement  in 
which  companies,  including  many  of  the  larger  corporations  in  this 
country,  collaborated  with  the  Department  of  Defense  (in  the  Air 
Force,  via  the  Air  Force  Computer  Emergency  Response  Team  under 
the  67th  Network  Warfare  Wing)  and  Department  of  Homeland  Secu¬ 
rity  to  share  sensitive  threat  information  and  thereby  improve  the  col¬ 
lective  cyberspace  defense.3 

Beard :  What  you  are  beginning  to  see  now  on  the  commercial  side  is 
a  frustration  with  being  on  static  defense.  The  underlying  economics 
of  cyber  attacks  currently  favor  the  adversary  just  as  improvised  explo¬ 
sive  devices  favor  insurgents.  To  counter  that  model,  we  have  part¬ 
nered  both  with  industry  and  government  to  develop  trusted  platforms 
that  allow  for  dynamic  defenses  through  our  Cloudshield  products.  Al¬ 
ternatively,  some  in  the  commercial  markets  believe  it  is  time  to 
punch  back.  This  move  from  the  cyber  operations  perspective  is  to 
move  from  computer  network  defense  to  computer  network  attack.  I 
have  real  concerns  about  commercial  companies  taking  on  a  computer 
network  attack  type  of  mission,  with  unintended  consequences  both 
for  law  enforcement  and  other  government  agencies. 

Vautrinot:  Historically  under  international  law,  the  concept  of  attack 
was  the  province  of  the  nation-state.  However,  geographic  boundaries 
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no  longer  demarcate  actors  on  the  offensive;  for  example,  we've  seen 
companies  selling  services  purporting  to  respond  to  cyber  intrusions 
by  sending  reset  commands  or  redirecting  malicious  traffic.  The  na¬ 
ture  of  cyber  is  that  companies  may  well  have  the  capability  to  go 
much  further.  In  doing  so,  they  will  contend  with  domestic  law  as  well 
as  statutes  where  they  are  operating  or  causing  effects.  Unfortunately, 
current  domestic  and  international  policies  haven't  kept  pace  with  the 
advancement  in  cyber  capabilities;  therefore,  loopholes  and  outright 
gaps  in  governance  exist  that  can  be  leveraged  by  bold  corporations. 

In  the  Air  Force,  we  aren’t  just  constrained  by  domestic  laws  but  also 
by  government  policy.  Generally,  the  Department  of  Homeland  Secu¬ 
rity  is  responsible  for  defending  cyber  assets  outside  the  Department 
of  Defense's  networks,  but  regardless  of  which  organization  is  contem¬ 
plating  these  actions,  the  problems  of  definitively  attributing  an  intru¬ 
sion  to  a  particular  attacker  and  deconflicting  actions  with  other  enti¬ 
ties  are  particularly  difficult.  This  again  highlights  the  need  for  an 
information-sharing  framework  between  government  and  industry 
that  facilitates  rapid  action  to  cyber  events. 

Air  Force  senior  leaders  are  certainly  aware  of  the  vulnerabilities  of 
our  network  systems,  but  now  there  is  also  a  keen  recognition  of  the 
opportunities  to  enable  defense  as  well  as  facilitate  mission  success.  A 
great  example  has  been  our  work  with  US  Transportation  Command 
and  Air  Mobility  Command.  Their  dependencies  are  not  limited  to  the 
.mil  domain  but  on  the  .com  and  the  ability  to  work  with  industry 
partners  to  ensure  worldwide  movement.  As  a  result,  they  are  acutely 
aware,  and  the  understanding  causes  them  to  be  very  proactive  in 
terms  of  resolution.  Yet  in  other  commands,  there  is  resistance  and  be¬ 
lief  that  their  networks  are  "private”  or  separate  from  the  global  Inter¬ 
net  and  therefore  its  inherent  adversaries.  In  regards  to  your  indepen¬ 
dent  offices,  did  you  experience  similar  variance? 

Beard:  We  did.  We  had  employees,  partners,  and  even  clients  who 
operated  on  what  they  believed  to  be  "closed”  networks;  therefore, 
they  didn't  feel  like  they  had  a  problem.  They  simply  did  not  see  the 
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need  for  added  layers  of  protection  or  policy  enforcement  on  their  ac¬ 
tivities.  What  they  called  bureaucracy  is  what  we  call  mission  assur¬ 
ance  in  the  context  of  systems  engineering. 

Vautrinot:  Clearly,  a  necessity  for  unity  of  effort  and  with  it  a  clear 
chain  of  responsibility— command  and  control.  Certainly,  you  were  im¬ 
plementing  an  enterprise  solution  for  all  the  right  reasons,  and  the  held 
of  independent  offices  realized  the  importance.  Nevertheless,  there  is 
resistance  to  losing  what  some  believe  is  their  self-actualization— their 
ability  to  control.  What  allowed  you  to  bridge  that  natural  resistance  in 
the  held  and  drive  the  implementation? 

Beard:  I  would  say  three  things.  One  was  the  commitment  of  leader¬ 
ship.  You  had  to  have  the  will  of  the  leadership  to  say,  "We're  willing  to 
go  here.”  Second,  we  began  to  educate  the  leadership,  management, 
and  select  employee  groups.  That  was  really  important  to  us— to  in¬ 
crease  the  awareness.  Finally,  we  had  to  rethink  the  context  of  cyber¬ 
security.  We  needed  to  understand  what  truly  had  to  be  protected  and 
where  we  would  establish  trust.  The  results  of  that  exercise  materially 
changed  our  defense-in-depth  strategy. 

Vautrinot:  What  level  of  leadership  was  necessary  to  initiate?  In  our 
vernacular,  it  would  be  the  major  commands  and  key  functionals  say¬ 
ing,  “OK,  we’re  all  in  agreement.  We  recognize  the  threat,  and  we’re  all 
going  to  move  together  in  this  direction.”  Then  it  would  be  our  respon¬ 
sibility  to  help  them  understand  the  rationale  for  implementing  mea¬ 
sures  or  taking  action  that  may  be  locally  restrictive. 

Beard:  Correct,  not  everybody  agreed.  It  took  a  combined  chief  ex¬ 
ecutive  officer  /  chief  operating  officer  /  chief  financial  officer-level 
mandate,  and  we  broke  some  china.4  Although  people  understood  the 
leadership  decision  and  the  need  for  policy  enforcement  and  over¬ 
sight,  they  still  wanted  autonomy,  so  we  then  developed  tools  to  pro¬ 
vide  autonomy  while  preserving  the  security  posture.  That  was  done 
in  the  context  of  productivity  and  giving  people  what  they  wanted. 
What  we  didn't  understand  20  years  ago,  when  operations  in  the  digital 
domain  began  to  evolve,  was  this  cyber-risk  issue.  The  risk  issue  has 
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now  raised  its  ugly  head,  and  you  can't  ignore  it,  so  you're  conflicted.  I 
want  to  take  care  of  you  as  an  end  user,  as  a  customer,  but  I  have  this 
other  responsibility  that  you  may  or  may  not  understand  or  appreci¬ 
ate,  and  I'll  try  to  help  explain  it.  I  just  can’t  explain  it  to  every  end 
user  because  I  don't  have  the  cycles  to  do  that  because  then  I'm  not 
doing  my  job.  So  that's  part  of  the  balance. 

Vautrinot:  You  are  protecting  the  long-term  viability  of  the  corporate 
entity,  the  same  way  that  we’re  protecting  the  long-term  viability  of 
the  mission  and  our  support  to  the  nation.  There  has  to  be  some  free¬ 
dom  of  action,  across  the  enterprise,  to  allow  that  protection. 

I  believe  that  in  industry  you  also  have  a  requirement  to  report,  not 
cybersecurity  per  se,  but  your  viability  as  a  corporate  entity  in  the 
realm  of  cybersecurity.  If  I  had  a  similar  report,  I  anticipate  we 
wouldn't  receive  a  passing  grade.  However,  we  have  moved  toward  a 
construct  where  there’s  both  asset-  and  enterprise-level  management, 
but  only  on  the  .mil  and  the  .smil  networks.  Each  of  the  mission  sys¬ 
tem  networks  defines  itself  separately  and  is  independently  resourced 
and  managed.  In  your  model,  there'd  be  one  “general”  who  would  be 
designated  to  control  asset  management  of  all  Air  Force  network  inter¬ 
faces,  soup  to  nuts— precisely  what  you  had  to  do  in  industry.  Cer¬ 
tainly  necessary,  but  I've  learned  that  operational  viability  in  this  con¬ 
tested  environment  requires  a  fundamental  change  to  the  assets  we 
would  centrally  manage— it  requires  sensoring  to  enable  awareness 
and  proactive  response  to  threats  within  the  network.  The  first  step, 
having  the  asset  management,  by  itself  is  insufficient,  but  being  able 
to  sensor  it— to  get  that  situational  awareness  and  to  allow  your  system 
to  react  in  an  automated  fashion— is  the  next  step.  How  did  you  ap¬ 
proach  the  engineering-level  changes? 

Beard:  That  was  part  of  the  second  journey  in  this  process— to  instru¬ 
ment  and  do  all  the  enterprise  vulnerability  analysis  and  the  scans 
against  that  baseline.  This  allows  you  to  prepare  for  continuous  moni¬ 
toring.  The  reason  that  it’s  important  is  what  makes  up  the  third  jour¬ 
ney:  I  may  want  to  morph  my  network  based  on  the  business  mission, 
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actionable  threat  intelligence,  and  the  intent  of  select  adversaries  that 
are  active. 

Vautrinot:  This  is  where  cyberspace  operations  can  facilitate  mission 
operations  or  provide  mission  alternatives.  We  don’t  need  to  command 
and  control  the  mission,  but  we  need  to  have  full  visibility  of  what's 
going  on  in  the  [cyberjspace  and  be  able  to  adjust  it  in  real  time  to 
thwart  adversary  positioning.  It  makes  the  adversary's  problem  set 
much  more  difficult  while  preserving  mission  effectiveness. 

Beard:  Exactly.  Because  if  adversaries  understand  your  network  bet¬ 
ter  than  you  do,  you've  got  problems,  and  if  your  computer  infrastruc¬ 
ture  is  so  rigid  that  you  can't  dynamically  allocate,  they're  going  to 
take  advantage  of  that,  and  once  again  both  the  economic  and  opera¬ 
tional  advantages  go  to  the  adversary.  This  is  why  we  moved  to  the  hy¬ 
brid  cloud  model— because  it  gave  us  the  opportunity  at  the  applica¬ 
tion  and  data  level  to  move  workloads  around.  I  can  now  take  a 
workload  that  has  historically  operated  on  specific  servers  in  a  specific 
data  center  and  dynamically  assign  that  workload  to  virtual  machines 
operating  in  virtual  data  centers  that  may  have  very  different  geo¬ 
graphic  characteristics.  Information  can  stay  within  my  data  center, 
but  I  can  move  it  to  different  places. 

Vautrinot:  In  that  construct,  for  example,  employee  health  care 
doesn't  own  medical  data,  and  the  finance  department  wouldn't  own 
financial  data.  Moving  and  providing  access  to  desired  data  within  the 
enterprise  is  the  key,  and  each  branch  of  the  enterprise  is  using  that 
data  rather  than  controlling  it  as  a  segregated  element.  The  goal 
shouldn't  be  to  control  but  rather  have  trusted  data  accessible  anytime, 
anywhere.  Our  challenge  is  breeding  an  environment  that  is  con¬ 
stantly  agile. 

There  appears  to  be  a  bit  of  a  misnomer  surrounding  IT  efficiency 
“savings.”  Talking  to  AT&T,  Microsoft,  and  industry  partners  like  you, 
the  front-end  investment  to  make  that  change  is  not  only  an  invest¬ 
ment  of  corporate  culture  and  leadership  but  also  a  significant  capital 
investment.  Not  just  to  save  money  over  the  long-term  operation  of 
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the  IT  but  a  financial  investment  in  cybersecurity.  How  did  your  cor¬ 
poration  work  through  the  investment  dynamic  to  determine  that  the 
company  had  an  imperative  to  afford  cybersecurity?  What  was  the 
scope  of  that  assessment  and  dialogue? 

Beard :  We  didn't  try  to  make  it  about  saving  money  on  the  front  end. 
We  tried  to  make  it  about  strategic  agility  and  what  that  meant  to  us  as 
a  global  corporation.  We  knew  that  we  needed  agility  at  the  enterprise 
level.  So  by  making  this  investment,  it  began  to  give  us  the  ability  to 
start  flexing.  Think  of  it  as  not  just  using  this  technology  to  operate 
companies  but  in  the  context  of  how  to  virtualize  companies  and  re¬ 
combine  them.  Indeed,  SAIC  is  going  through  such  an  activity  at  this 
time,  and  it  is  exciting  to  see  IT  as  an  enabler  rather  than  a  roadblock. 

Vautrinot:  Cyber  in  this  context  that  we  are  describing— it  is  a  mis¬ 
sion,  and  you're  not  viable  without  this  mission.  Despite  our  current 
national  economic  situation,  we  have  to  transition  dialogue  from  cost 
reduction  to  the  defense  imperative  and  therefore  worthy  of  the  in¬ 
vestment  from  a  national  strategy  standpoint. 

Beard:  We  pulled  cyber  out  separately  from  a  budget  perspective  and 
treated  it  as  a  strategic  investment.  If  you  look  at  IT  as  a  cost  center, 
you  will  miss  the  opportunity.  I've  advised  a  number  of  companies 
over  the  years  that  looked  to  IT  cost-reduction  targets  as  a  way  of 
meeting  a  corporate  cost  objective,  but  the  dirty  little  secret  is  that 
they  take  on  technical  debt  that  shows  up  neither  on  the  balance  sheet 
as  an  unfunded  liability  nor  on  the  enterprise  risk  register. 

Vautrinot:  In  that  vein,  my  "technical  debt''  is  lack  of  automation  and 
sensoring,  which  I'm  overcoming  manually— in  effect  a  huge  work¬ 
force  that  isn't  sustainable  or  appropriate  in  a  dynamic  cyber  environ¬ 
ment.  It  drives  reactionary  responses  to  problems  and  precludes  re¬ 
sourcing  automated  sensoring  and  solutions. 

Our  efforts  to  move  from  a  dispersed,  installation-managed  net¬ 
work  to  a  single,  homogeneous,  and  centrally  managed  network  will 
allow  the  follow-on  of  necessary  sensoring  and  automation  to  free  up 
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resources  and  robust  network  operations  at  the  scale  required  for  a 
global  industry,  like  yours,  or  military  operations.  Until  then,  this 
drives  a  large  back-end  cost. 

Beard :  We  all  know  that  reactive  posture  is  more  expensive.  We 
would  never  do  that  with  a  weapons  system  development  effort— we 
try  to  design  solid  engineering  into  the  front  end.  It’s  a  lot  cheaper  in 
the  long  run  to  do  it  in  that  order. 

Vautrinot:  The  assumption  is  that  the  things  you  see,  you  can  at  least 
deal  with,  but  what  about  the  unknown  unknowns? 

Beard:  The  unknown  unknowns  are  unacceptable.  For  Sarbanes-Oxley 
Act  purposes,  for  example,  we  are  required  to  have  preventive  controls 
in  place.5  The  unknown  unknowns  force  you  to  think  "left  of  bang.”6 
But  that  then  leads  you  to  the  realization  that  you  can't  protect  every¬ 
thing.  So  let's  have  a  business  dialogue  or  a  military  dialogue  about  the 
assets— could  be  data  assets— that  we  wish  to  protect. 

Vautrinot:  It's  what  I  referred  to  as  the  defended  asset  list  but  at  a  dis¬ 
crete  level  instead  of  an  enterprise  level.  We've  worked  individually 
with  the  Tanker  Airlift  Control  Center  as  well  as  one  of  the  many  air 
operations  centers  to  demonstrate  this  dynamic.  But  we  cannot  apply 
it  at  an  enterprise  level  because  we  can't  "see”  or  control  the  cyber  as¬ 
sets  in  the  enterprise. 

Beard:  In  my  role,  I'll  get  a  phone  call  that  says,  "I  have  this  urgent  in¬ 
formation  security  problem;  come  help  me.”  And  the  first  two  ques¬ 
tions  are,  “When  were  you  made  aware  of  a  requirement  to  protect  this 
asset?”  and  “When  did  you  know  you  had  this  problem?”  If  it  wasn't  on 
the  defended  asset  list,  I  didn't  proactively  do  anything  to  protect  it, 
and  if  it's  been  exfiltrated  or  manipulated,  I  didn't  specifically  look  to 
ensure  it  didn't  go  outbound  or  preserve  its  baseline.  So  if  the  defended 
asset  list  is  incomplete,  it's  very  difficult  for  me  to  develop  and  imple¬ 
ment  a  cybersecurity  policy  to  protect  and  defend  those  assets.  This  is 
a  team  sport,  and  there  is  shared  responsibility  in  mission  assurance 
that  is  incredibly  dynamic.  If  you  simply  buy  a  security  appliance,  by 
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the  time  you  deploy  it,  it’s  out  of  date.  So  you  have  an  asymmetric 
threat,  and  you  are  trying  to  respond  to  it  with  a  traditional  legacy 
process.  It's  counterproductive,  which  is  why  we  are  looking  to 
change  the  game. 

Vautrinot:  Absolutely,  that's  why  we  are  building  a  platform  that  can 
be  constantly  adjusted.  If  I  used  a  space  operations  comparison,  I  de¬ 
fine  the  interface  of  the  payload  with  the  platform.  That  means  I  need 
to  own  the  platform  and  the  enterprise  and  can  adjust  in  real  time.  For 
example,  under  Col  Paul  Welch,  commander  of  the  688th  Information 
Operations  Wing,  we  developed  the  Information  Operations  Platform 
to  provide  an  accredited  open-architecture  framework  for  rapid  de¬ 
ployment  of  other  third-party  applications.7  This  ability  to  swap  our 
tools  allows  accelerated  fielding  and  deployment  of  those  tools,  provid¬ 
ing  dynamic  and  responsive  operations  for  Air  Force  and  Department 
of  Defense  cyberspace  operations.  This  provides  flexibility— like  a 
fighter  aircraft,  which  can  be  configured  for  an  air-to-ground  mission 
during  one  sortie  and  for  an  air-to-air  mission  during  the  next.  The  dif¬ 
ference  is  that  the  fighter  is  reconfigured  in  hours/ days,  whereas  in 
cyber  it's  got  to  be  seconds. 

Beard:  Let's  say  my  intrusion  detection  system  has  been  defeated 
and  I  need  something  new.  The  software  base  is  part  of  a  platform  and 
it's  nonnegotiable,  so  the  hardware  platform  itself  doesn’t  change.  I 
can  deploy  it  right  now.  It's  this  stealth  machine  with  out-of-band  con¬ 
trols  that  only  we  see,  but  I  can  put  different  payloads  on  it.8  The  inde¬ 
pendent  offices  can  do  what  they  need  to  do,  but  the  enterprise  can 
still  dominate  the  network  on  their  behalf.  That's  the  trick— command 
and  control  at  the  enterprise  level  with  decentralized  execution,  a  dy¬ 
namic  environment  that  provides  enterprise  agility  and  "trust”  built 
into  the  platform  that  is  highly  configurable  and  allows  you  to  look 
"left  of  bang.” 

Vautrinot:  The  intent  as  we  continue  to  refine  our  skills  in  this  do¬ 
main  is  to  move  from  the  reactive  to  the  proactive  posture  and  present 
agile,  sensored  targets  to  our  adversaries.  All  of  us,  whether  govern- 
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ment  or  industry,  are  in  the  business  of  trust:  we  must  use  the  available 
intellectual  capital  and  emerging  technologies  to  protect  our  informa¬ 
tion  and  systems  from  being  linked  into  an  expansive,  malicious  chain 
[2011  global  remediation  cost  $388  billion].9  The  nation's  cyber  journey 
is  a  shared  responsibility,  and  it's  personal— only  through  developing 
partnerships  can  we  continue  to  defend  this  nation  in  cyberspace. 

The  sheer  scope  of  this  domain  is  difficult  to  grasp:  in  the  next  60 
seconds,  168,000,000  e-mails  will  be  sent;  695,000  status  updates  will 
be  posted  to  Facebook;  and  690,000  searches  will  be  conducted  on 
Google.10  As  the  opportunities  afforded  by  this  domain  continue  to  mul¬ 
tiply,  so  do  the  vulnerabilities.  Those  of  us  who  were  present  for  this 
discussion  left  the  room  not  only  with  a  greater  understanding  of  the 
challenges  that  he  ahead  in  this  domain  but  also  with  a  greater  appre¬ 
ciation  for  the  collaborative  efforts  occurring  between  government  and 
industry  to  safeguard  the  critical  information  that  corporations,  com¬ 
manders,  and  the  country  rely  upon.  © 


Notes 

1.  In  one  of  the  most  destructive  acts  of  computer  sabotage  as  of  this  writing,  on  15  Au¬ 
gust  2012,  a  virus  erased  data  on  three-quarters  of  Saudi  Aramco’s  corporate  computers, 
posting  a  burning  US  flag  in  place  of  that  information.  Because  of  the  attack,  the  company 
was  forced  to  replace  tens  of  thousands  of  hard  drives. 

2.  The  mission  of  the  689th  Combat  Communications  Wing  is  to  train,  deploy,  and  de¬ 
liver  expeditionary  and  specialized  communications,  air  traffic  control,  and  landing  systems 
for  humanitarian-relief  operations  and  dominant  combat  operations— anytime,  anywhere. 

To  keep  up  with  the  rapidly  changing  strategic  environment,  combat  communicators  rely 
heavily  on  industry  to  provide  commercial  off-the-shelf  technology,  which  enables  them  to 
extend,  operate,  and  defend  cyberspace  capabilities  in  the  most  austere  locations,  in  the 
most  effective  manner  possible. 

3.  Ensuring  the  defense  of  military  information  and  systems— both  through  computer 
network  defense  and  computer  network  attack— is  a  daily  challenge.  The  67th  Network  War¬ 
fare  Wing  executes  Air  Force  network  operations,  defense,  attack,  and  exploitation  to  create 
integrated  cyberspace  effects  on  behalf  of  TWenty-Fourth  Air  Force  and  the  combatant  com¬ 
mands.  The  wing  operates  within  current  Department  of  Defense  authorities  to  protect  Air 
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Force  and  Department  of  Defense  information  and  systems  and  to  ensure  freedom  of  ma¬ 
neuver  in  the  cyber  domain.  The  67th  includes  the  on-net  operators  responsible  for  the  day- 
to-day  operation  of  Air  Force  networks.  Extensive  collaboration  between  the  wing's  person¬ 
nel  and  other  government  and  civilian  organizations  ensures  the  continuous  sharing  of 
cyber  threat  information  across  public  and  private  entities. 

4.  Just  as  "a  bull  in  a  china  shop”  breaks  china.  In  this  case,  the  introduction  of  cyberse¬ 
curity  processes  broke  normal  business  processes. 

5.  A  congressional  bill  enacted  in  2002,  the  Sarbanes-Oxley  Act  is  also  known  in  the  Sen¬ 
ate  as  the  Public  Company  Accounting  Reform  and  Investor  Protection  Act,  and  in  the 
House  of  Representatives  as  the  Corporate  and  Auditing  Accountability  and  Responsibility 
Act.  The  bill  was  enacted  due  to  a  number  of  major  corporate  and  accounting  scandals,  in¬ 
cluding  those  involving  Enron  and  WorldCom. 

6.  The  term  left  of  bang  refers  to  a  timeline  in  which  each  marked  incident  is  a  "bang.” 
Activities  "right  of  bang”  are  reactive  responses  to  the  incident;  those  "left  of  bang"  are  pro¬ 
active  actions  in  preparation  for  such  incidents. 

7.  The  688th  Information  Operations  Wing  delivers  these  proven  information  operations 
and  engineering  infrastructure  capabilities  integrated  across  the  air,  space,  and  cyberspace 
domains.  The  wing  has  developed  an  innovative,  rapid  tool-development  process  accompa¬ 
nied  by  a  rapid-acquisition  program  that  reflects  immediate,  medium,  and  long-term  sys¬ 
tems  approaches.  The  innovation  framework  involves  Air  Force  Materiel  Command  (AFMC) 
working  with  Air  Force  Space  Command  to  establish  a  center  of  cyber  innovation  to  provide 
cost-effective  cyberspace  capabilities,  such  as  the  Information  Operations  Platform,  in  the 
appropriate  time  frame  to  support  the  joint  war  fighter. 

The  688th  expands  the  innovations  achieved  by  the  research  topic  of  interest,  hosted  by 
Colonel  Welch,  by  locally  partnering  with  science  and  technology  expertise  from  the  Air 
Force  Research  Laboratory  and  simultaneously  joining  with  their  acquisition  counterparts 
such  as  Col  Chris  Kinne,  from  AFMC  in  San  Antonio,  to  expand  local  acquisition  authority 
delegated  from  the  Office  of  the  Secretary  of  the  Air  Force  for  Acquisition.  A  diverse,  colo¬ 
cated  knowledge  set  is  required  to  complement  the  resident  cyber-development  expertise. 

Lt  Col  Jim  Smith  leads  the  Air  Force  Operational  Jfest  and  Evaluation  Center’s  presence  in 
this  new  organization  to  test  and  verify  the  effectiveness  of  proposed  capabilities  in  an  op¬ 
erational  environment. 

8.  Out-of-band  control  passes  control  data  on  a  separate  connection  from  main  data. 

9.  Norton  Cybercrime  Report  2011 ,  Symantec  Corporation,  7  September  2011,  http ://www 
.symantec.com/content/en/us/home_homeoffice/html/cybercrimereport/. 

10.  "60  Seconds— Things  That  Happen  On  Internet  Every  Sixty  Seconds,"  GO-Gulf.com,  1 
June  2011,  http://www.go-gulf.com/blog/60-seconds/. 
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component  numbered  air  force  providing  combatant  commanders  with 
trained  and  ready  cyber  forces  that  plan  and  conduct  cyberspace  operations. 
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Some  Reflections  on  the 
Intersection  of  Law  and  Ethics 
in  Cyber  War 

Maj  Gen  Charles  J.  Dunlap  Jr.,  USAF,  Retired 


Few  security  issues  have  captured  the  attention  of  the  public  as 
has  the  specter  of  cyber  war.  In  a  recent  op-ed,  President  Obama 
warns  that  “the  cyber  threat  to  our  nation  is  one  of  the  most  se¬ 
rious  economic  and  national  security  challenges  we  face."1  This,  in 
turn,  has  raised  many  questions  about  the  legal  parameters  of  cyber 
operations,  including  the  rules  applicable  to  actual  cyber  war.2 

Parallel  to  the  growing  interest  in  the  legal  aspects  of  cyber  war  are  an 
increasing  number  of  questions  focused  on  the  ethical  dimension.  That 
is  an  important  consideration  for  any  military  endeavor  but  one  just 
emerging  with  respect  to  cyber  operations.3  Mounting  concern  about 
the  ethical  aspects  of  cyber  activities  led  the  US  Naval  Academy  to  spon¬ 
sor  an  entire  conference  on  the  subject  in  the  spring  of  201 2. 4  Even 
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more  recently,  the  Atlantic  published  an  article  entitled  "Is  It  Possible  to 
Wage  a  Just  Cyberwar?, ”  which  discussed  several  intriguing  issues.5 

This  article  reflects  upon  a  few  issues  that  illustrate  how  legal  and 
ethical  concerns  intersect  in  the  cyber  realm.  Such  an  intersection 
should  not  be  especially  surprising.  As  historian  Geoffrey  Best  insists, 
“it  must  never  be  forgotten  that  the  law  of  war,  wherever  it  began  at 
all,  began  mainly  as  a  matter  of  religion  and  ethics.  ...  It  began  in  eth¬ 
ics  and  it  has  kept  one  foot  in  ethics  ever  since.”6  Understanding  that 
relationship  is  vital  to  appreciating  the  full  scope  of  the  responsibilities 
of  a  cyber  warrior  in  the  twenty-first  century. 


Law  and  Ethics 

How  do  law  and  ethics  relate?  Certainly,  adherence  to  the  law  is  a 
baseline  ethical  responsibility,  but  it  is  only  that— a  baseline.  In  the 
March  2012  edition  of  Armed  Forces  Journal,  Lt  Gabriel  Bradley,  USN, 
points  out  that  "the  law  of  armed  conflict  sets  minimum  standards.” 

He  goes  on  to  argue  persuasively  that  inculcating  individual  and  insti¬ 
tutional  moral  and  ethical  values— a  sense  of  honor,  if  you  will— is  es¬ 
sential  to  ensuring  actual  compliance  with  the  law.  And  he  is  certainly 
right  when  he  quotes  Christopher  Coker's  observation  that  "laws  can 
reaffirm  the  warrior  ethos;  they  cannot  replace  it.”7 

Of  course,  even  determining  the  baseline— that  is,  the  law— is  not  al¬ 
ways  easy  in  twenty-first-century  operations  generally  but  especially 
with  regard  to  cyber  activities.  Among  the  many  reasons  for  this  diffi¬ 
culty  is  the  fact  that  most  of  the  law  of  armed  conflict  was  designed  to 
address  conflicts  waged  mainly  with  kinetic  weaponry.  Nevertheless, 
in  this  writer's  view,  existing  law  has  ready  applicability  to  cyber  op¬ 
erations,  a  notion  that  perhaps  brings  us  to  the  first  issue  regarding  the 
intersection  of  law,  ethics,  and  cyber  operations.8  Specifically,  we 
sometimes  hear  that  cyberspace  is  such  a  new  domain  that  no  existing 
law  could— or  even  should— apply  to  military  operations  in  it. 
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Such  an  idea  is  simply  untrue.  Most  of  the  law  of  armed  conflict  is 
not  domain  specific.  Along  this  line,  consider  a  recent  project  by  the 
Harvard  Program  on  Humanitarian  Policy  and  Conflict  Research  to 
write  a  manual  specifically  on  the  international  law  applicable  to  air 
and  missile  warfare.9  The  program  did  produce  a  useful  volume,  but  it 
is  a  relatively  thin  one  since  the  project  discovered  a  comparatively 
modest  amount  of  law  that  seemed  wholly  unique  to  the  air  and  space 
domains.  One  can  say  much  the  same  about  the  cyber  domain,  includ¬ 
ing  ethical  considerations.10 

Furthermore,  what  sometimes  masquerades  as  a  legal  problem  in  cy¬ 
ber  operations  is  often  more  of  a  technical  issue  or  a  policy  conun¬ 
drum—  not  an  authentic  legal  problem.  The  much  ballyhooed  issue  of 
what  constitutes  the  proverbial  "act  of  war”  in  the  cyber  domain  offers 
a  good  example.  Although  the  phrase  "act  of  war”  is  a  political  term, 
not  a  legal  axiom,  such  phrases  as  "use  of  force”  and  "armed  attack”  do 
have  legal  meaning  and  could  relate  to  a  casus  belli  in  terms  of  a  force¬ 
ful  response.11 

In  fact,  the  interpretation  of  such  expressions  in  the  cyber  realm  is 
resolvable  under  the  law  if —and,  really,  only  “if— technology  can  pro¬ 
vide  adequate  data  regarding,  for  example,  the  actual  harm  caused  by 
the  supposed  "attack,”  as  well  as  sufficient  information  about  who  actu¬ 
ally  did  it.  Of  course,  the  absence  of  attribution  data  (technically  chal¬ 
lenging  to  obtain  in  the  cyber  realm)  can  be  a  definitive  legal  and  ethi¬ 
cal  bar  to  a  forceful  response.  This  may  prove  frustrating  when  people 
want  to  “do  something”  in  answer  to  a  cyber  incident,  but  it  is  hardly 
unreasonable  for  the  law —and  ethics— to  require  reliable  information 
concerning  who  might  be  responsible  before  launching  a  counter  of 
some  kind. 

Technologically  speaking,  the  daunting  task  of  determining  attribu¬ 
tion  is  not  a  problem  for  lawyers  or,  for  that  matter,  ethicists;  rather,  it 
is  something  for  technologists  to  solve.12  It  is  interesting,  therefore, 
that  the  authors  of  the  above-mentioned  Atlantic  article  argue— in  rela¬ 
tion  to  the  alleged  use  of  a  cyber  weapon  (Stuxnet)  against  Iran's  nu- 
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clear  development  facilities— that  "the  lack  of  attribution  of  Stuxnet 
raises  ethical  concerns  because  it  denied  Iran  the  ability  to  counterat¬ 
tack,  encouraging  it  towards  ever  more  extreme  behavior.”13 

Aside  from  the  question  of  whether  Iran  would  necessarily  have  a 
legal  or  moral  basis  to  counterattack  as  a  result  of  the  alleged  Stuxnet 
operation,  it  is  of  further  interest  that  the  authors  of  the  Atlantic  piece 
say  that  "to  make  attribution  work,  we  need  international  agree¬ 
ments.”  These  would  include,  they  contend,  agreements  that  “cyberat¬ 
tacks  should  carry  a  digital  signature  of  the  attacking  organization” 
and  that  certain  networking  protocols  could  be  used  to  "make  attribu¬ 
tion  easier.”14 

Most  experts  would  probably  say  that  current  law  does  not  require 
such  facilitation  of  cyber  attribution.15  Nevertheless,  the  authors  of  the 
Atlantic  article  argue  for  "better  [cooperation]  on  international  network 
monitoring  to  trace  sources  of  attacks”  and  seem  to  believe  that  "eco¬ 
nomic  incentives,  such  as  the  threat  of  trade  sanctions,  can  make  such 
agreements  desirable.”16  Again,  one  might  disagree  with  much  about 
these  proposals,  but  the  authors  should  be  commended  for  at  least  be¬ 
ginning  the  dialogue  on  possible  ways  of  addressing  one  of  the  most 
perplexing  legal  and  moral  questions  of  cyber  war. 

As  with  attribution,  technological  issues— not  the  law  per  se— are 
also  the  most  challenging  aspect  of  the  targeting  of  cyber  weaponry. 
The  cardinal  legal  and  ethical  principles  of  distinction  and  proportion¬ 
ality  require  technical  data  that  will  inform  decision  makers  as  to  who 
might  be  affected  by  a  particular  technique,  and  to  what  extent.17 
Again,  that  this  may  prove  technically  difficult  is  neither  a  legal  nor  an 
ethical  problem  but  a  scientific  one.  Indeed,  one  can  say  that  the  abil¬ 
ity  to  model  effects  with  dependable  accuracy  represents  one  of  the 
most  needed  capabilities  in  the  world  of  cyber  operations.  Such  an 
ability  would  give  decision  makers— not  to  mention  lawyers  and  ethi- 
cists— the  kind  of  information  that  is  patently  essential  for  making  rea¬ 
soned  judgments  about  employing  a  cyber  methodology. 
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Do  Legal  and  Ethical  Values 
Unduly  Encumber  Cyber  Warriors? 

Over  and  above  questions  about  the  application  of  legal  regimes  and 
ethical  mores  to  a  particular  cyber  scenario  is  the  broader  question  of 
whether  any  restraints  should  apply  at  all.  More  specifically,  some 
people  believe  that  attempts  to  apply  the  law  will  encumber  the 
United  States'  cyber  efforts  and  put  its  security  at  risk.  This  rather  sur¬ 
prising  question  lies  at  the  heart  of  a  serious  debate  in  which  Stewart 
Baker  and  this  writer  engaged  under  the  auspices  of  the  American  Bar 
Association.18 

By  way  of  context,  Mr.  Baker,  a  highly  respected  lawyer  with  the 
prestigious  Washington  law  firm  of  Steptoe  and  Johnson,  had  previ¬ 
ously  served  in  government  as  general  counsel  for  the  National  Secu¬ 
rity  Agency  as  well  as  assistant  secretary  for  policy  in  the  US  Depart¬ 
ment  of  Homeland  Security.  He  begins  his  polemic  this  way:  “Lawyers 
don't  win  wars.  But  can  they  lose  a  war?  We're  likely  to  find  out,  and 
soon.  Lawyers  across  the  government  have  raised  so  many  showstop¬ 
ping  legal  questions  about  cyberwar  that  they've  left  our  military  un¬ 
able  to  fight,  or  even  plan  for,  a  war  in  cyberspace.''19 

Mr.  Baker  further  claims  that  any  attempts  to  “impose  limits  on  cy¬ 
berwar  [are]  .  .  .  doomed.”20  Among  the  most  troubling  aspects  of  his 
argument  is  really  an  ethical  one  of  the  first  order.  He  points  to  the 
devastation  caused  by  air  warfare  during  World  War  II  and  refers  to  the 
claim  made  by  former  British  prime  minister  Stanley  Baldwin  in  1932 
that  in  air  warfare  “the  only  defense  is  in  offense,  which  means  that 
you  have  got  to  kill  more  women  and  children  more  quickly  than  the 
enemy  if  you  want  to  save  yourselves.”21 

Mr.  Baker  then  goes  on  to  cite  Mr.  Baldwin's  “kill  more  women  and 
children  more  quickly”  concept  by  asserting  that  “if  we  want  to  defend 
against  the  horrors  of  cyberwar,  we  need  first  to  face  them  with  the 
candor  of  a  Stanley  Baldwin"  (emphasis  added).22  Only  after  construct- 
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ing  a  cyber  war  strategy  so  framed  would  Mr.  Baker  consider  it  appro¬ 
priate  to  “ask  the  lawyers  for  their  thoughts.”23 

Fully  reprising  my  response  lies  beyond  the  scope  of  this  article  (al¬ 
though  the  title— “Lawless  Cyberwar?  Not  If  You  Want  to  Win”— may 
suggest  its  content).24  Suffice  it  to  say  that  it  is  vitally  important  in  cy¬ 
ber  war  (as  in  any  military  operation)  to  ground  the  “limits”  whenever 
possible,  not  only  in  the  law  or  ethics  per  se  but  also  in  pragmatic, 
war-fighting  rationale.  In  the  case  of  cyber,  this  is  not  particularly  dif¬ 
ficult  to  do,  especially  if  the  actual  war  fighters  do  not  perceive  an 
asymmetry  between  what  law  and  ethics  might  require  and  what  they 
believe  they  need  to  accomplish  their  mission. 

Notwithstanding  Mr.  Baker's  assertion  that  legal  machinations  have 
left  the  armed  forces  “unable  to  fight,  or  even  plan  for,  a  war  in  cyber¬ 
space,”  Gen  Robert  Kehler,  USAF,  commander  of  US  Strategic  Com¬ 
mand,  whose  subordinate  organization  US  Cyber  Command  is  the  lead¬ 
ing  proponent  of  military  cyber  planning  and  operations,  seems  to 
disagree.  In  November  2011,  he  declared  that  he  did  “not  believe  that 
we  need  new  explicit  authorities  to  conduct  offensive  operations  of  any 
kind.”  Furthermore,  Kehler  said  that  that  he  did  “not  think  there  is  any 
issue  about  authority  to  conduct  [cyber]  operations.”25  In  short,  the  war 
fighters  apparently  do  not  see  an  incompatibility  with  legal  and  ethical 
restraints  and  their  ability  to  effectively  “plan  for  a  war  in  cyberspace.” 

Adherence  to  the  rule  of  law  is  especially  important  in  the  cyber 
realm  because  nearly  all  experts  agree  that  confronting  the  threat  re¬ 
quires  the  cooperation  of  foreign  countries  in  order  to  track  and  neu¬ 
tralize  cyber  threats— in  peace  or  war.26  Nations  vital  to  this  effort,  in¬ 
cluding  especially  the  world's  major  democracies,  doubtlessly  would 
not  be  inclined  to  cooperate  with  any  country  that  rejected  limits  on 
military  operations,  cyber  or  otherwise.  Professors  Michael  Reisman 
and  Chris  T.  Antoniou  point  out  in  their  book  The  Laws  of  War  that  “in 
modern  popular  democracies,  even  a  limited  armed  conflict  requires  a 
substantial  base  of  public  support.  That  support  can  erode  or  even  re¬ 
verse  itself  rapidly,  no  matter  how  worthy  the  political  objective,  if 
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people  believe  that  the  war  is  being  conducted  in  an  unfair,  inhumane,  or 
iniquitous  way"  (emphasis  added).27 

A  dismissal  of  Mr.  Baker's  construct  for  cyber  war  does  not  suggest, 
however,  that  ethical  and  legal  concerns  about  cyber  war  are  therefore 
obviated.  For  example,  one  of  the  most  serious  concerns  involves  the 
role  of  civilians  in  cyber  operations. 


Civilian  Cyber  Warriors 

It  almost  goes  without  saying  that  enormous  cyber  expertise  lies  in 
the  civilian  community  and  that  the  armed  forces  must  have  access  to 
it.  That  said,  the  extent  of  that  access  and  precisely  what  that  access 
does— or  should—  mean  are  properly  the  subject  of  legal  and  ethical 
scrutiny. 

The  basics  are  not  hard.  To  enjoy  the  combatant  privilege— that  is,  a 
“license,''  so  to  speak,  to  engage  in  lawful  destructive  acts  against  the 
enemy's  person  or  property  without  fear  of  prosecution— one  must  or¬ 
dinarily  be  a  member  of  the  duly  constituted  armed  forces  of  a  bellig¬ 
erent  in  an  armed  conflict.28  People  have  often  mistakenly  taken  this 
to  mean  that  a  civilian  cannot  directly  participate  in  hostilities.  Actu¬ 
ally,  civilians  can  do  so  without  necessarily  committing  a  war  crime, 
but  there  are  consequences. 

Chief  among  them  is  the  fact  that  if  civilians  fall  into  the  hands  of 
enemies,  they  might  properly  subject  them  to  domestic  criminal  law 
for  acts  that,  if  done  by  a  member  of  the  opposing  military,  would  be 
privileged  from  prosecution.  Moreover,  under  the  law  of  war,  civilians 
are  targetable— by  either  kinetic  or  cyber  means— when  they  directly 
participate  in  hostilities.  In  the  cyber  context,  one  should  understand 
that  even  the  International  Committee  of  the  Red  Cross  explicitly  uses 
as  examples  of  direct  participation  acts  that  one  would  expect  of  a  cy¬ 
ber  warrior— that  is,  "interfering  electronically  with  military  computer 
networks  (computer  network  attacks)  and  transmitting  tactical  target¬ 
ing  intelligence  for  a  specific  attack.''29 
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What  does  all  of  this  mean  from  an  ethical  perspective?  For  one 
thing,  it  is  essential  that  civilians  understand  the  potential  conse¬ 
quences,  especially  when  they  are  away  from  the  work  site,  such  as  at 
home  with  their  families.  Despite  the  debate  in  the  international  com¬ 
munity  about  circumstances  that  would  allow  an  adversary  to  target  a 
civilian  on  the  same  basis  as  a  member  of  the  armed  forces,  the  Inter¬ 
national  Committee  of  the  Red  Cross  agrees  that  such  targeting  applies 
to  civilians  who  "assume  a  ‘continuous  combat  function'  "  (as  opposed 
to  merely  "participating  in  hostilities  in  a  spontaneous,  sporadic  or  un¬ 
organized  way”).30 

Members  of  the  armed  forces— along  with  civilians  regularly  en¬ 
gaged  in  a  "a  continuous  combat  function”  such  as  computer  network 
attack— can  be  attacked  with  any  legal  weapon  wherever  and  when¬ 
ever  found,  regardless  of  whether  at  that  particular  moment  they  pres¬ 
ent  an  imminent  threat  or  are  otherwise  performing  a  military  func¬ 
tion.  This  means,  for  example,  that  a  civilian  cyber  warrior  regularly 
engaged  in  computer  network  attack  operations  could  legitimately 
come  under  attack  by  a  lawful  belligerent  (not  a  terrorist)  in  his  or  her 
home  in  a  Washington  suburb.  Further,  the  adversary  could  use  any 
lawful  weapon— not  just  a  cyber  weapon— if  it  otherwise  complies  with 
the  law  of  war.  Accordingly,  if  the  civilian  is  sufficiently  critical  to  mili¬ 
tary  cyber  operations,  he  or  she  could  be  assaulted  with  great  violence 
wherever  found.  However,  the  incidental  death  and  injury  to  innocent 
civilians  (e.g.,  the  cyber  warrior's  own  family)  that  might  occur  in  the 
attack  should  not  be  "excessive  in  relation  to  the  concrete  and  direct 
military  advantage  anticipated”  (“military  advantage,”  of  course,  refers 
to  the  elimination  or  neutralization  of  the  cyber  expert).31 

Thus,  the  ethical  issue  for  cyber  warriors  may  be  the  extent  to  which 
one  may  appropriately  ask  civilians  to  take  these  kinds  of  risks.  It  is 
one  thing  for  members  of  the  armed  forces  who  voluntarily  undertake 
the  proverbial  “unlimited  liability  contract”  of  military  service  to  put 
themselves  at  risk.  It  is  quite  another  to  ask  civilians  to  do  so— and 
something  further  to  expect  the  families  of  civilians  to  accept  that  they 
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may  become  collateral  damage  in  a  conflict  that  has  violent  expres¬ 
sions  along  with  nonkinetic  cyber  effects.  In  cyber  war,  the  “front 
lines”  maybe  far  from  what  anyone  might  recognize  as  the  traditional 
battlefield. 

No  one  knows  how  real  this  kind  of  threat  might  be.  However,  in  an 
era  of  “sleeper  cells”  and  the  proliferation  of  other  clandestine  special 
operations  forces  among  many  countries,  this  type  of  counter  to  Amer¬ 
ica's  cyber  capabilities  may  not  be  as  outlandish  as  some  might  think. 
In  any  event,  this  discussion  of  personal  risk  that  cyber  operations 
might  occasion  makes  it  somewhat  ironic  that  cyber  warriors  need  to 
steel  themselves  for  a  cruel  assault  on  their  ethics  and  professionalism 
by  some  critics. 


Challenges  to  the  Martial  Ethic  of  Cyber  Warriors? 

Perhaps  one  of  the  most  perplexing  critiques  that  has  accompanied 
the  growing  use  of  advanced  technologies  in  war  is  the  penchant 
among  some  contemporary  commentators  to  assume  that  it  is  some¬ 
how  “unmanly”  or  “unworthy”  to  employ  them.  Consider  the  experi¬ 
ence  of  drone  operators  who,  like  cyber  combatants,  wage  war  from 
computer  consoles.  One  pundit's  very  recent  article  entitled  “With  Its 
Deadly  Drones,  the  US  Is  Fighting  a  Coward's  War”  offers  an  example 
of  the  kind  of  nasty  rhetoric  used.32  Though  such  aspersions  have  not 
yet  made  their  way  to  cyber  warriors,  it  is  perhaps  only  a  matter  of 
time  before  they  find  themselves  subject  to  the  same  kind  of  insult  to 
their  professional  ethic. 

How  did  all  of  this  start?  We  might  trace  it  to  remarks  a  few  years 
ago  by  Dr.  David  Kilcullen,  a  lieutenant  colonel  retired  from  the  Aus¬ 
tralian  army  who  has  become  one  the  foremost  advocates  of  the 
ground-centric,  manpower-intensive  form  of  counterinsurgency  that 
found  expression  in  Field  Manual  3-24  /  Marine  Corps  Warfighting 
Publication  3-33.5,  Counterinsurgency,  published  in  2006. 33  It  is  impor¬ 
tant  to  understand  that  the  manual  is  rather  hostile  to  air  operations  in 
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general,  devoting  just  five  pages  to  them  in  the  300-page  document,  so 
Dr.  Kilcullen's  critique  of  drones  does  not  seem  inconsistent  with  his 
broader  views  about  airpower. 

In  any  event,  Dr.  Kilcullen  argued  before  Congress  in  2009  that 
drone  attacks  against  terrorists  were  "backfiring”:  "In  the  Pashtun  tribal 
culture  of  honor  and  revenge,  face-to-face  combat  is  seen  as  brave; 
shooting  people  with  missiles  from  20,000  feet  is  not.”  According  to 
Kilcullen,  "using  robots  from  the  air  .  .  .  looks  both  cowardly  and 
weak.”34  Quite  obviously,  one  might  rather  easily  apply  his  thesis  to  cy¬ 
ber  operations  and  those  who  conduct  them. 

What  makes  these  statements  stunning  in  their  irony  is  that  the  ad¬ 
versary  to  which  Kilcullen  refers  not  only  uses  remotely  detonated  im¬ 
provised  explosive  devices  to  kill  US  forces  from  the  safety  of  distance, 
but  also  employs  children  to  plant  them.35  Would  that  not  make  such 
an  enemy,  by  his  own  "culture  of  honor”  standards,  "cowardly  and 
weak”?  Regardless,  this  entire  discussion,  however  demoralizing  and 
inaccurate,  is— in  terms  of  actual  war  fighting— rather  immaterial.  The 
"object  of  war,”  as  Gen  George  Patton  rather  graphically  put  it,  "is  not 
to  die  for  your  country  but  to  make  the  other  guy  die  for  his.” 

Physical  courage,  however  admirable,  is  not  the  only  quality  one 
needs  for  victory  in  twenty-first-century  warfare— and  perhaps  ever. 
Native  Americans,  for  example,  waged  war  with  extraordinary  courage. 
Yet,  in  the  April  2012  issue  of  the  Journal  of  Military  History,  historian 
Anthony  R.  McGinnis  points  out  that  Native  Americans'  individualistic 
and  stylized  form  of  warfare  was  no  match  for  "a  modern  technologi¬ 
cally  advanced  nation”  with  "ultimate  victory  as  its  goal.”36  Of  course, 
there  is  nothing  wrong  with  being  "a  modern  technologically  advanced 
nation”  with  "ultimate  victory  as  its  goal”  as  long  as  one  uses  those 
technological  advances  in  a  legally  and  ethically  appropriate  way. 

In  reality,  there  is  nothing  unethical  about  waging  war  from  afar, 
and  there  is  nothing  especially  unusual  about  it.  Since  practically  the 
beginning  of  time,  warriors  have  sought  to  engage  their  adversaries  in 
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ways  that  denied  them  the  opportunity  to  bring  their  weapons  to  bear. 
For  example,  as  this  writer  has  said  elsewhere, 

David  slew  Goliath  with  a  missile  weapon  before  the  giant  could  bring  his 
weapons  to  bear;  the  sixteen-foot  pikes  of  Alexander  the  Great’s  phalanxes 
reached  their  targets  well  ahead  of  the  twelve  foot  pikes  wielded  by  their 
opponents;  English  longbowmen  destroyed  the  flower  of  French  knight¬ 
hood  at  Agincourt  from  afar  when  they  rained  arrows  down  upon  the 
horsemen;  and,  more  recently,  U.S.  and  British  tanks  destroyed  the  heart 
of  Saddam’s  armor  forces  during  1991's  Battle  of  73  Easting  much  because 
their  guns  outranged  those  of  Iraq's  T-72  tanks.  There  is  nothing  new 
about  killing  from  a  distance.37 

Still,  something  about  computerized  warfare  draws  special  scorn 
from  certain  individuals,  however  wrongly  and  unfairly.  For  example, 
the  United  Nations  commissioned  Philip  Alston,  a  New  York  Univer¬ 
sity  law  professor,  as  a  "special  rapporteur”  to  write  a  report  on  tar¬ 
geted  killings.  The  document  he  produced  included  his  opinions  about 
drone  operators.  In  it  he  charged  that  because  drone  operations  can  be 
conducted  "entirely  through  computer  screens  and  remote  audiofeed, 
there  is  a  risk  of  developing  a  'Playstation'  mentality  to  killing.”38 

A  "Playstation”  mentality  to  killing?  That  even  the  suggestion  of 
such  an  insulting  lack  of  professionalism  would  find  itself  into  an  offi¬ 
cial  United  Nations  report  is,  itself,  disquieting.  The  principal  evidence 
for  Professor  Alston's  finding  appears  to  be  his  own  speculations  about 
the  mind-set  of  those  doing  a  task  he  himself  has  never  performed. 

The  actual  evidence,  however,  points  in  a  very  different  direction  than 
the  one  Alston  suggests— one  that  reinforces  the  idea  that  these  offi¬ 
cers  hardly  consider  their  duties  a  game.  Indeed,  Dr.  Peter  Singer  of 
the  Brookings  Institution  said  in  2010  that  in  his  studies  he  found 
"higher  levels  of  combat  stress  among  [some  drone]  units  than  among 
some  units  in  Afghanistan.”  He  concluded  that  operators  suffered  "sig¬ 
nificantly  increased  fatigue,  emotional  exhaustion  and  burnout.”39 
These  maladies  are  hardly  indicative  of  “game”  players. 

More  recently,  the  Air  Force  Times  quoted  an  Air  Force  official  who 
countered  the  "video  game”  accusation  directly  by  pointing  out  that 


January-February  2013 


Air  &  Space  Power  Journal  |  32 


Cyber  Focus 


V  Senior  Leader  Perspective 


the  responsibilities  of  drone  operators  were  extremely  stressful  and 
that  the  operations  were  "a  deeply,  deeply  emotional  event.  It's  not  de¬ 
tached.  It's  not  a  video  game.”40  While  debate  still  roils,  it  demonstrates 
how  quickly  some  critics  deride  the  professionalism  of  principled  peo¬ 
ple  doing  what  their  nation  asks  them  to  do.41  Quite  obviously,  the 
comparison  with  cyber  operations  is  not  quite  the  same.  Regardless, 
cyber  operators  are  in  the  very  serious  business  of  defending  their 
country  and,  in  doing  so,  may  be  called  upon  to  wreak  havoc  via  cyber 
methodologies  upon  an  adversary.  Though  the  means  of  doing  so  may 
be  different,  the  professionalism  demanded  by  the  operations  is  very 
high,  and  the  psychological  burdens  on  those  who  conduct  them  are 
likely  very  great. 

Another  aspect  of  the  drone  campaigns  has  emerged  that  might  find 
analogy  in  the  ethics  and  professionalism  that  cyber  operators  must 
display.  In  an  April  2012  article  in  Rolling  Stone,  controversial  writer 
Michael  Hastings  claims  that 

the  remote-control  nature  of  unmanned  missions  enables  .  .  .  the  Penta¬ 
gon  and  the  CIA  [to]  now  launch  military  strikes  or  order  assassinations 
without  putting  a  single  boot  on  the  ground— and  without  worrying  about 
a  public  backlash  over  U.S.  soldiers  coming  home  in  body  bags.  The  im¬ 
mediacy  and  secrecy  of  drones  make  it  easier  than  ever  for  leaders  to  un¬ 
leash  America's  military  might— and  harder  than  ever  to  evaluate  the  con¬ 
sequences  of  such  clandestine  attacks.42 

For  all  his  bluster,  Hastings  has  something  of  a  point  when  he  says 
that  "the  immediacy  and  secrecy  of  drones  make  it  easier  than  ever  for 
leaders  to  unleash  America's  military  might.”  In  this  writer's  experi¬ 
ence,  senior  decision  makers  are  keenly  aware  that  any  military  opera¬ 
tion  can  have  unintended  consequences— no  matter  how  "cost  free”  it 
might  seem  in  planning.  Still,  what  he  says  with  respect  to  drones 
might  find  a  parallel  with  cyber  operations  and  could  call  upon  cyber 
warriors  to  robustly  exhibit  ethical  virtues,  including  especially  candor 
and  courage. 
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The  Need  for  Frank,  Holistic  Advice 

The  newness  of  cyber  operations,  the  uncertainty  of  their  precise  ef¬ 
fect,  and  the  sheer  difficulty  of  their  execution  may  not  always  be  fully 
understood  by  all  participants  in  the  chain  of  decision.  These  condi¬ 
tions  may  give  rise  to  another  ethical  responsibility:  to  render  frank, 
holistic  advice.  It  is  possible  that  in  a  given  situation,  those  involved  in 
the  process  may  have  to  step  out  of  their  lane,  so  to  speak,  to  ask  the 
hard  questions  or  point  out  inconvenient  facts.  If  America's  cyber 
power  is  to  be  "unleashed,”  as  Hastings  might  put  it,  the  nation  must 
do  so  with  the  same  care  as  it  would  with  a  more  traditional  military 
operation.  To  underline  this  point,  we  may  call  upon  someone  to  go 
beyond  the  norm,  just  to  make  sure  that  all  the  right  concerns  are 
taken  into  account— including  ethical  and  legal  ones— so  that  the  best 
decisions  are  made. 

Fortunately  (for  lawyers,  anyway)  the  American  Bar  Association's 
Model  Code  of  Professional  Conduct— the  ethical  "bible”  for  lawyers— 
specifically  allows  such  holistic  advice.  Rule  2.1  of  the  code  calls  upon 
lawyers  to  "exercise  independent  professional  judgment  and  render 
candid  advice.”  Furthermore,  lawyers  are  not  limited  to  providing  legal 
advice,  as  the  rule  goes  on  to  say  that  "in  rendering  advice,  a  lawyer 
may  refer  not  only  to  law  but  to  other  considerations  such  as  moral, 
economic,  social  and  political  factors,  that  may  be  relevant  to  the  cli¬ 
ent's  situation.”43  In  truth,  this  is  the  right  guidance  not  just  for  lawyers 
but,  really,  for  all  military  and  civilian  cyber  professionals  because  the 
success  of  such  operations  depends  upon  a  wide  range  of  factors,  and 
it  is  incumbent  upon  all  involved  to  work  together  to  ensure  that  they 
come  to  light  and  receive  appropriate  consideration. 

The  American  Bar  Association's  rule  mentions  candor.  Again,  this  is 
not  something  simply  for  attorneys  but  a  fundamental  ethical  virtue  for 
all  defense  professionals.44  Among  other  things,  one  should  keep  this 
trait  in  mind  when  assessing  the  potential  threat  that  cyber  represents. 
Misstating  or,  worse,  deliberately  misrepresenting  the  threat  can  lead  to 
poor  allocations  of  resources  and  other  errors  in  judgment.  Opinions 
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about  the  scope  and  nature  of  the  threat  differ  widely;  in  a  PBS  News- 
hour  interview  in  the  spring  of  2012,  Terry  Benzel  of  the  Information 
Research  Institute  insists  that  "all  of  us  in  [the  cyber]  community,  we 
talk  about  cyber-Pearl  Harbor.  And  it’s  not  if.  It's  when.”45  Similarly,  a 
"leading  European  cybersecurity  expert  says  international  action  is 
needed  to  prevent  a  catastrophic  cyberwar  and  cyberterrorism.”46 

Not  everyone  agrees,  however.  In  April  2012,  Rear  Adm  Samuel  Cox, 
director  of  intelligence  at  US  Cyber  Command,  reportedly  "down¬ 
played  the  prospect  that  an  enemy  of  the  United  States  could  com¬ 
pletely  disable  the  nation's  electric  power  grid  or  shut  down  the  Inter¬ 
net  because  those  systems  are  designed  to  withstand  severe 
cyberattacks. ”47  More  stinging  is  an  article  of  February  2012  in  Wired, 
in  which  researchers  Jerry  Brito  and  Tate  Watkins  debunk  much  of  the 
histrionic  talk  about  the  threat  of  cyber  war:  "Evidence  to  sustain  such 
dire  warnings  [about  cyberwar]  is  conspicuously  absent.”48  Consistent 
with  their  conclusions  is  a  2011  report  by  the  Organization  for  Eco¬ 
nomic  Cooperation  and  Development.  Asserting  that  governments 
"need  to  make  detailed  preparations  to  withstand  and  recover  from  a 
wide  range  of  unwanted  cyber  events,  both  accidental  and  deliberate,” 
the  authors  of  the  study  nevertheless  conclude  "that  very  few  single 
cyber-related  events  have  the  capacity  to  cause  a  global  shock.”49  Writ¬ 
ing  in  Foreign  Policy,  analyst  Thomas  Rid  contends  that  cyber  war  is 
"still  more  hype  than  hazard.”50 

All  of  this  raises  concerns  because  Brito  and  Watkins  say  that  “in 
many  respects,  rhetoric  about  cyber  catastrophe  resembles  threat  infla¬ 
tion  we  saw  in  the  run-up  to  the  Iraq  War.”  They  also  point  out  that  "cy¬ 
bersecurity  is  a  big  and  booming  industry”  and  that  "Washington  teems 
with  people  who  have  a  vested  interest  in  conflating  and  inflating 
threats  to  our  digital  security.”  Although  they  stop  short  of  actually  ac¬ 
cusing  anyone  of  pushing  fears  of  cyber  war  for  personal  gain,  they  do 
call  for  a  "stop  [in  the]  apocalyptic  rhetoric”  and  insist  that  "alarmist  sce¬ 
narios  dominating  policy  discourse  may  be  good  for  the  cybersecurity- 
industrial  complex,  but  they  aren't  doing  real  security  any  favors.”51 
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The  scope  and  immediacy  of  the  threat  are  rightly  debated,  yet  all 
might  agree  that,  in  any  case,  deliberately  overstating  (or  understating) 
the  threat —even  for  the  well-intentioned  reasons  of  advocacy— can  raise 
questions  of  ethics  and  professionalism.  As  Brito  and  Watkins  suggest, 
the  run-up  to  the  war  with  Iraq  in  2003  makes  clear  what  can  happen 
when  a  threat  is  misconstrued  (perhaps  the  reason  that  they  entitle 
their  polemic  “Cyberwar  Is  the  New  Yellowcake”).  In  short,  candor— 
and  tempered  rhetoric  if  appropriate— are  critical  qualities  for  cyber 
warriors.  President  Obama's  measured  language,  which  urges  people  to 
take  the  cyber  threat  “seriously”  and  to  make  planning  for  it  a  “prior¬ 
ity,”  represents  a  responsible  approach  that  highlights  the  dangers  with¬ 
out  falling  victim  to  counterproductive  and  misleading  hyping.52 


The  Virtue  of  Competence 

Finally,  one  of  the  key  ethical  responsibilities  of  cyber  warriors  is 
competence.  Again,  the  American  Bar  Association's  Model  Rules  of 
Professional  Conduct  provide  guidance  that  all  cyber  professionals 
may  want  to  consider  analogizing  to  their  responsibilities.  Rule  1.1  of 
that  code  says  that  “competent  representation  requires  the  legal 
knowledge,  skill,  thoroughness  and  preparation  reasonably  necessary 
for  the  representation."53  For  those  concerned  about  the  legal  and  ethi¬ 
cal  aspects  of  cyber  war,  the  mandate  for  competence  goes  well  be¬ 
yond  knowledge  and  understanding  of  law  and/or  ethics  per  se. 

Undoubtedly,  many  aspects  of  cyber  operations  are  extraordinarily 
complex.  Thus,  legal— and  other— advisers  must  become  as  familiar  as 
possible  with  the  cyber  client's  “business,”  including  its  technical  as¬ 
pects.  A  working  knowledge  of  the  technology  not  only  will  help  advis¬ 
ers  understand  the  facts  sufficiently  to  apply  legal  and  ethical  princi¬ 
ples  to  them,  but  also  will  give  such  advisers  all-important  credibility 
with  those  who  seek  their  counsel  in  the  first  place.  Decision  makers 
in  the  cyber  realm,  like  those  seeking  counsel  in  other  activities,  natu¬ 
rally  will  gravitate  towards  those  who  show  a  genuine  understanding 
of  the  many  intricacies  of  their  discipline. 
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This  is  not  an  easy  task.  Staying  current  with  the  technology  in  this 
phenomenally  complicated  held  is  a  time-consuming  and  never-ending 
job.  But  it  is  one  that  must  be  undertaken  well  in  advance  of  need  be¬ 
cause  failing  to  do  so  may  lead  to  a  lifetime  of  regret.  Winston 
Churchill  once  observed  that  “to  every  man,  there  comes  in  his  life¬ 
time  that  special  moment  when  he  is  figuratively  tapped  on  the  shoul¬ 
der  and  offered  that  chance  to  do  a  very  special  thing,  unique  to  him 
and  fitted  to  his  talents.  What  a  tragedy  if  that  moment  finds  him  un¬ 
prepared  or  unqualified  for  that  which  would  be  his  finest  hour.”54 


Concluding  Observations 

This  article  has  sought  to  illustrate  just  a  few  of  the  examples  of  how 
law  and  ethics  might  intersect.  It  may  invite  the  question,  Which  of 
these  imperatives  will  best  operate  to  impose  the  limits  on  cyber  war 
that  honorable,  yet  pragmatic,  people  demand?  Kenneth  Anderson,  a 
professor  of  law  at  American  University,  recently  had  occasion  to  con¬ 
sider  one  of  his  earlier  writings  about  the  efficacy  of  law  and  honor  as 
“engines”  for  right  behavior  in  conflict: 

Faith  in  legality  as  the  engine  driving  such  adherence  as  exists  to  the  laws 
of  war  seems  to  me,  however,  entirely  misplaced;  it  is  a  fantasy  tailor-made 
for  lawyers,  and  especially  for  American  lawyers.  Lawyers  believe  the 
problem  is  one  of  enforcement,  whereas  in  fact  it  is  one  of  allegiance.  Cod¬ 
ifications  of  international  law  are  a  useful  template  for  organizing  the  cat¬ 
egories  of  a  soldier's  duties.  But,  in  the  end,  the  culture  relevant  to  respect 
for  international  humanitarian  law  is  not  the  culture  of  legality  and  the 
cult  of  lawyers,  but  instead  it  is  the  culture  of  the  professional  honour  of 
soldiers,  and  what  they  are  willing  or  not  willing  to  do  on  the  battlefield.55 

The  question  of  whether  “honor”  is  conterminous  with  ethics  or  a 
subset  of  the  same  maybe  appropriate  for  a  lively  university  debate. 
What  is  more  important  to  note,  however,  as  Anderson  does,  is  that 
John  Keegan,  perhaps  the  most  eminent  military  historian  of  the  mod¬ 
ern  era,  had  no  reservations  in  saying  that  “there  is  no  substitute  for 
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honour  as  a  medium  for  enforcing  decency  on  the  battlefield,  never 
has  been,  and  never  will  be.”56 

The  cyber  "battlefields”  may  not  much  resemble  the  ones  to  which 
Keegan  refers,  but  his  view  certainly  has  equal  applicability.  In  the 
end,  honor  and  the  ethical  mind-set  it  implies  are  indispensable.  Yet 
the  discussion  cannot  end  there  because  merely  having  developed  the 
character  to  come  to  know  the  right  answer  is  not  enough  since  it  may 
take  courage  to  insist  upon  it. 

The  courage  that  cyber  warriors  need  is  not  necessarily  the  physical 
courage  that  traditional  battlefield  combatants  are  called  upon  to  dis¬ 
play.  Rather,  it  is  vastly  more  likely  that  cyber  combatants  will  need  to 
exhibit  moral  courage.57  This  is  especially  so  as  norms  develop  for  the 
conduct  of  cyber  operations.  Doing  the  right  thing,  particularly  in  cir¬ 
cumstances  of  extreme  urgency  for  which  we  have  no  explicit  guid¬ 
ance— save  for  reference  to  classic  tenets  of  law  and  ethics— may  be 
quite  a  challenge. 

Cyber  combatants  may  wish  to  consider  that  in  his  classic  study  of 
military  heroism,  another  British  historian,  Max  Hastings,  concludes 
that  "physical  bravery  is  found  [in  the  military]  more  often  than  the 
spiritual  variety.”  "Moral  courage,"  he  insists  "is  rare.”58  Yet,  cyber  war¬ 
riors  most  need  to  exhibit  exactly  this  kind  of  "rare.”  The  law  can  pro¬ 
vide  an  architecture,  but  only  when  honor  and  moral  courage  intersect 
can  we  truly  rest  assured  that  ethical  principles  worth  defending  are 
actually  preserved.  © 
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In  September  2007,  more  than  65  subject  matter  experts  from 

around  the  Air  Force  gathered  at  the  US  Air  Force  Academy  to  dis¬ 
cuss  the  way  ahead  for  institutionalizing  cyber  training  and  force 
development.1  This  occasion  followed  the  establishment  of  a  provi¬ 
sional  Air  Force  Cyber  Command  (AFCYBER)  (a  major  command)  in 
November  2006,  which  itself  followed  the  Air  Force's  incorporation  of 
cyberspace  into  its  mission  statement  less  than  a  year  prior.  Cyber 
power  advocates  of  the  decade  leading  up  to  this  point  were  finally 
building  momentum  for  establishing  cyberspace  as  a  fully  recognized 
war-fighting  domain.  Unfortunately,  these  victories  came  at  a  cost— a 
fact  that  started  to  become  evident  at  the  2007  conference.2 

Conference  organizers  showed  participants  the  definition  of  cyber¬ 
space  adopted  by  the  Department  of  Defense  (DOD)  in  its  National 
Military  Strategy  for  Cyberspace  Operations,  published  in  2006:  “A  domain 
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characterized  by  the  use  of  electronics  and  the  electromagnetic  spec¬ 
trum  to  store,  modify,  and  exchange  data  via  networked  systems  and 
associated  physical  infrastructures.”3  They  also  described  the  outline 
of  the  Air  Force's  plan  for  structuring  the  cyber  career  held,  with  two 
primary  cyber  "shredouts”  for  computer  network  operators  and  combat 
systems  (electronic  warfare  [EW])  officers.4  Almost  immediately,  this 
revelation  led  to  some  uncomfortable  questions  and  awkward  implica¬ 
tions.  Why  had  the  service  placed  two  vastly  different  career  fields  into 
a  single  training  pipeline?  Does  radar  jamming  belong  to  the  same 
class  of  warfare  as  computer  network  “hacking”?  Does  this  mean  we 
should  consider  the  airborne  laser  part  of  cyber  warfare  since  it  uti¬ 
lizes  the  electromagnetic  spectrum  (EMS)?  The  participants,  experi¬ 
enced  Airmen  who  hailed  from  both  sides  of  the  divide,  asked  these 
and  other  questions,  leaving  them  largely  unanswered. 

Fortunately,  both  the  DOD  and  Air  Force  have  since  corrected  or  de- 
emphasized  most  of  the  aforementioned  problems  underlying  this 
framework,  albeit  not  without  substantial  upheaval.  Fess  than  two 
years  after  publication  of  the  definition  of  cyberspace  in  the  National 
Military  Strategy  for  Cyberspace  Operations,  the  DOD  updated  it  to  a 
more  focused  and  practical  foundation  for  doctrine:  “A  global  domain 
within  the  information  environment  consisting  of  the  interdependent 
network  of  information  technology  infrastructures,  including  the  Inter¬ 
net,  telecommunications  networks,  computer  systems,  and  embedded 
processors  and  controllers.”5  Shortly  thereafter,  the  Air  Force  down¬ 
graded  the  provisional  AFCYBER  major  command  to  a  numbered  air 
force  subordinated  to  the  new  US  Cyber  Command  subunified  com¬ 
mand,  and  never  fully  incorporated  combat  systems  officers  into  its 
cyber  career  held.6  For  the  most  part,  the  service  dropped  the  explicit 
focus  on  the  EMS  and  physical  characteristics. 

The  efforts  of  early  cyber  power  advocates  to  draw  attention  and  re¬ 
sources  to  cyberspace  as  a  military  operational  domain  have  borne 
fruit  in  recent  years.7  However,  the  body  of  theory  and  doctrine  that 
developed  was  arguably  influenced  (possibly  unconsciously)  by  the 
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very  process  of  struggling  to  overcome  conservative  resistance.  Recur¬ 
rent  themes  attempt  to  portray  cyberspace  as  more  comfortably  analo¬ 
gous  to  the  traditional  domains  of  land,  sea,  air,  and  space.  In  addition 
to  highlighting  its  physical  characteristics,  current  doctrine  transfers 
basic  principles  and  tenets  from  other  operational  domains  to  cyber¬ 
space,  apparently  assuming,  without  careful  consideration,  their  appli¬ 
cability  to  the  new  context.  (The  article  examines  some  examples  of 
this  practice  later  on.) 

Cyberspace  unquestionably  has  a  physical  element  that  carries  with 
it  certain  war-fighting  implications,  and  many  fundamental  principles 
of  war  will  undoubtedly  apply  to  cyber  war.  However,  the  approach  is 
flawed,  in  that  the  doctrine  appears  to  look  for  ways  to  prove  that  “cy¬ 
berspace  is  like  other  domains"  instead  of  fully  accounting  for  its 
unique  properties.  Rather  than  continually  focus  on  the  relatively 
mundane  physical  elements  of  cyberspace,  military  thinkers  should 
embrace  its  unique  logical  or  virtual  nature  and  consider  its  implica¬ 
tions.  Understanding  the  uniqueness  of  cyberspace  provides  founda¬ 
tional  clarity  of  thought  towards  extending  domain-specific  theory  and 
formulating  doctrine. 


Cyberspace  as  a  Physical  Domain 

Early  attempts  to  describe  cyberspace  as  an  operational  domain 
tended  to  emphasize  its  grounding  in  the  physical  world  as  a  defining 
characteristic.  Again,  this  is  understandable  since  theorists  were  at¬ 
tempting  to  establish  cyberspace  as  a  domain  on  par  with  land,  sea, 
air,  and  space— all  domains  within  the  physical  world.  Proponents 
sought  to  carve  out  their  own  slice  of  the  same  physical  universe  in  or¬ 
der  to  place  cyberspace  fully  alongside  the  other  traditional  domains. 

In  his  seminal  work  Strategic  Warfare  in  Cyberspace,  one  of  the  most 
influential  early  studies  of  cyber  warfare,  Col  Gregory  Rattray,  USAF, 
retired,  cautioned  against  treating  cyberspace  as  a  purely  virtual  envi¬ 
ronment:  “Cyberspace  ...  is  actually  a  physical  domain  resulting  from 
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the  creation  of  information  systems  and  networks”  (emphasis  in  origi¬ 
nal).8  Clearly,  cyberspace  has  a  physical  manifestation  in  the  form  of 
the  electronic  devices  used  to  communicate,  and  Colonel  Rattray  was 
not  misguided  in  reminding  information  warriors  not  to  discount  phys¬ 
ical  interactions  with  cyberspace.  However,  this  argument  alone  did 
not  convince  individuals  who  sought  to  elevate  cyberspace  to  a  full- 
fledged  war-hghting  domain.  After  all,  no  other  domain  was  defined  by 
the  equipment  used  to  operate  within  it.  This  ultimately  led  to  co-opting 
the  EMS  as  the  physical  representation  of  cyberspace. 

Dr.  Daniel  Kuehl  of  the  National  Defense  University— a  longtime  ad¬ 
vocate  of  linking  cyberspace  closely  to  the  EMS  (he  referred  to  such  a 
relationship  as  early  as  1997)— went  on  to  have  "a  major  role  in  the 
crafting”  of  the  DOD’s  definition  of  cyberspace  in  2006. 9  Frequently 
cited,  he  continues  to  advocate  this  physical-centric  definition  of  cy¬ 
berspace  in  papers  and  guest  lectures.  Possibly  reflecting  this  early  in¬ 
fluence  and  desire  to  legitimize  cyberspace,  the  Air  Force  Cyberspace 
Thsk  Force  of  2006  proposed  a  “Cyber  Creed,”  which  stated,  among 
other  things,  that  “cyber  is  a  war-fighting  domain.  The  electromagnetic 
spectrum  is  the  maneuver  space”  (emphasis  in  original).10 

Assigning  the  EMS  to  cyberspace  is  appealing  for  a  number  of  rea¬ 
sons.  First  and  foremost,  this  spectrum  represents  a  pervasive,  well- 
defined  phenomenon  in  the  physical  world,  seemingly  qualified  to  sit 
at  the  same  table  with  the  other  physical  domains.  Most  digital  com¬ 
munications,  which  intuitively  seem  to  belong  to  cyberspace  (if  any¬ 
thing  does),  are  carried  on  radio  waves,  microwaves,  or  lasers  (either 
wirelessly  or  by  fiber-optic  cable),  all  of  which  belong  to  the  EMS.  Us¬ 
ing  this  as  a  starting  point,  one  finds  that  allowing  the  definition  of  cy¬ 
berspace  to  stretch  to  include  things  like  radar  (an  information  system 
of  sorts)  and,  with  that,  electronic  countermeasures,  does  not  appear 
wholly  unreasonable.  Suddenly,  cyberspace  attains  an  entirely  new 
level  of  credibility  in  the  mind  of  the  traditional  war  fighter  if  it  can 
claim  the  relatively  venerable,  proven,  and  effective  held  of  EW  as  its 
own.  Given  the  push  to  establish  cyberspace  as  a  new  domain,  one  can 


January-February  2013 


Air  &  Space  Power  Journal  |  47 


Cyber  Focus 


V  Feature 


Butler 


Refocusing  Cyber  Warfare  Thought 


easily  understand  why  the  DOD  initially  adopted  Kuehl’s  physical  defi¬ 
nition  of  cyberspace. 

However,  this  approach  quickly  encounters  difficulties.  If  radar  be¬ 
longs  to  cyberspace,  then  why  not  sonar?  After  all,  it  serves  essentially 
the  same  purpose— broadly  speaking— but  does  not  leverage  the  EMS 
in  any  meaningful  way.  The  airborne  laser  is  also  problematic  for  the 
opposite  reason  because  it  relies  almost  completely  on  the  EMS  to  cre¬ 
ate  effects,  but  any  definition  of  cyberspace  that  includes  laser  weap¬ 
ons  would  be  too  broad  and  thus  nearly  useless  for  any  practical  pur¬ 
pose.  Virtually  all  intelligence,  surveillance,  and  reconnaissance; 
tactical  sensors;  and  the  human  eye  depend  upon  the  EMS. 

Although  we  can  largely  characterize  cyberspace  (however  we 
choose  to  define  it)  by  the  use  of  electronics  and  the  EMS,  doing  so 
creates  some  practical  problems  doctrinally.  Associating  the  EMS  with 
cyberspace  leads  to  gathering  EW  and,  potentially,  directed  energy  op¬ 
erations  under  the  same  umbrella  as  computer  network  operations. 
This  results  in  managing  wholly  disparate,  highly  specialized  skill  sets 
under  one  structure  despite  their  having  little  to  no  commonality  in 
training  and  doctrine.  Furthermore,  from  a  theoretical  and  doctrinal 
standpoint,  electronics  and  the  EMS  are  largely  irrelevant  in  conceptu¬ 
ally  defining  cyberspace,  and  their  inclusion  distracts  from  the  truly 
defining  characteristics  of  cyberspace. 

Circumscribing  cyberspace  in  terms  of  its  use  of  electronics  and  the 
EMS  may  seem  intuitively  obvious,  but  it  remains  a  rather  superficial 
way  to  describe  the  domain.  After  all,  if  cyberspace  primarily  lever¬ 
aged  quantum  effects  to  process,  store,  and  exchange  information, 
would  it  not  still  be  fundamentally  the  same  from  an  operational  per¬ 
spective?  The  physical  mechanisms  used  by  the  technology  employed 
in  cyberspace  to  produce  effects  are  not  defining  characteristics  of  the 
domain— no  more  so  than  tanks  and  artillery  are  defining  characteris¬ 
tics  of  the  land  domain.11 

Now  that  cyberspace  has  been  successfully  established  as  a  serious 
military  concern,  forced  analogies  to  other  domains  have  largely  out- 
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lived  their  usefulness  in  advancing  cyberspace  theory  and  doctrine.  As 
noted  before,  the  DOD  and  Air  Force  have  moved  away  from  a  physi¬ 
cally  oriented  model  of  cyberspace,  as  evidenced  by  the  implementa¬ 
tion  of  their  new  definitions,  organization,  and  processes.  We  no  lon¬ 
ger  treat  EW  as  part  of  cyberspace,  and  we  base  training  and  force 
development  on  a  computer-network-centric  view  of  the  domain.12 
The  nascent  Air  Force  cyber  warfare  career  held  consists  primarily  of 
former  communications  personnel.13  Cyber  warfare  doctrine  and 
thinking  appear  to  be  getting  on  the  right  track. 

Unfortunately,  considerable  inertia  still  accompanies  the  old  models 
of  describing  cyberspace— an  understandable  situation,  given  their  ap¬ 
peal  to  traditional  military  sensibilities.  Recent  papers  continue  to  re¬ 
fer  to  and  emphasize  physical  aspects  of  cyberspace  that  have  little  or 
no  practical  bearing  above  a  technical  or  tactical  level,  despite  ostensi¬ 
bly  attempting  to  formulate  domain-specific  theory.  In  2009  one  such 
treatise  on  the  Chinese  cyber  threat  explicitly  took  issue  with  the  up¬ 
dated  (2008)  DOD  definition  of  cyberspace,  calling  back  to  the  old 
physically  oriented  model  by  observing  that  cyberspace  must  also  "en¬ 
compass  not  only  the  actual  military  and  civil  electronics  devices,  but 
also  the  electromagnetic  spectrum  on  which  the  information  .  .  .  trav¬ 
els.”14  The  author  goes  on  to  stress  that  "strictly  independent  [computer 
network  operations],  Electronic  Warfare  (EW),  and  Space  Operations 
[would]  instead  be  incorporated  within  the  overarching  and  ethereal, 
but  'physical,'  domain  of  Cyberspace.  Not  dissimilar  to  the  domains  of 
Land,  Sea,  and  Air.”15  In  2011  an  article  in  Joint  Force  Quarterly  explicitly 
referred  to  "cyberspace  (that  is,  the  electromagnetic  spectrum).”16  Even 
Air  Force  Doctrine  Document  (AFDD)  3-12,  Cyberspace  Operations 
(2010),  still  shows  the  residue  of  overemphasizing  the  EMS  although  it 
follows  the  DOD’s  lead  by  stopping  well  short  of  equating  the  two.17 

Undue  emphasis  on  the  physical  aspects  of  cyberspace  could  impair 
clear  insights  by  diffusing  or  artificially  circumscribing  the  domain, 
thus  potentially  deflecting  more  profitable  lines  of  thought.  Dr.  Samuel 
Liles,  associate  professor  at  the  National  Defense  University,  argues 
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that  “focusing  on  one  aspect  of  cyberspace  (EMS)  creates  a  strategic 
and  conceptual  blind  spot  to  leadership.  It  also  has  a  tendency  to  focus 
consideration  of  risk  via  threats  and  vulnerabilities  on  transmission 
mechanisms.”18  Accordingly,  continued  propagation  of  a  physically  ori¬ 
ented  paradigm  of  cyberspace  reinforces  these  flawed  viewpoints  in 
the  academic  and,  to  some  extent,  operational  communities.  Cyber¬ 
space  clearly  has  a  physical  element,  but  the  implications  are  rela¬ 
tively  obvious,  falling  cleanly  within  existing  doctrine  for  physical  at¬ 
tack,  EW,  and  other  well-worn  disciplines.  However,  cyberspace  differs 
fundamentally  from  other  operational  domains  in  a  number  of  ways 
that  sometimes  defy  attempts  to  apply  established  military  principles. 

Identifying  the  truly  meaningful,  unique  characteristics  of  warfare 
in  cyberspace  will  help  focus  the  minds  of  theoreticians,  allowing 
them  to  make  more  efficient  progress  in  the  held  by  determining  how 
cyber  warfare  substantively  departs  from  established  theory  and  doc¬ 
trine.  Thus,  they  can  also  clarify  the  principles  of  this  relatively  new 
and  unfamiliar  operational  domain  for  the  strategist  and  commander, 
helping  them  make  more  intuitive  decisions  as  they  operate  within  it. 


The  Unique  Character  of  Cyberspace 

The  ability  to  process,  store,  and  exchange  large  amounts  of  informa¬ 
tion  rapidly,  using  automated  systems,  is  the  defining  characteristic  of 
cyberspace— the  physical  methods  are  superficial.  In  fact,  its  logical  or 
virtual  nature,  rather  than  its  physical  mechanisms,  sets  cyberspace 
apart  from  other  domains.  This  characteristic  leads  to  a  number  of  im¬ 
plications,  some  more  obvious  than  others. 

Perhaps  the  most  often-cited  distinguishing  attribute  of  operating  in 
cyberspace  is  its  speed.19  Indeed,  the  observation  that  cyber  warfare 
takes  place  “(almost)  at  the  speed  of  light”  has  become  a  cliche.  For 
most  purposes,  physical  distances  in  cyberspace  are  almost  meaning¬ 
less-only  logical  topology  matters.  Planning  and  preparing  for  an  at¬ 
tack  may  take  weeks  or  more  to  develop  the  necessary  intelligence 
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and  accesses,  but,  once  launched,  the  strike  may  well  be  over  in  a  mat¬ 
ter  of  seconds.  Consequently,  in  many  cases  we  may  not  realistically 
be  able  to  react  to  an  attack  in  progress.  Often,  a  defender  can  do  noth¬ 
ing  more  than  deny  the  most  damaging  avenues  of  attack  in  advance, 
enable  detection,  and  respond  quickly  to  mitigate  and  remediate  its  ef¬ 
fects.  A  head-to-head  confrontation  between  offensive  and  defensive 
forces  in  real  time  rarely  occurs. 

This  brings  up  another  interesting  point.  Cyber  war  is  unusual  in  the 
sense  that  offensive  and  defensive  forces  are  highly  asymmetrical, 
compared  to  those  in  other  domains.20  Defensive  forces  primarily  in¬ 
clude  system  administrators  who  oversee  various  networks,  response 
teams  that  quickly  perform  forensics  and  remediation,  intrusion  detec¬ 
tion  analysts,  and  so  forth,  perhaps  along  with  software  developers 
who  hurriedly  patch  newly  discovered  flaws,  and  private  antivirus 
companies  that  develop  signatures  to  inoculate  systems  to  new  mal¬ 
ware.21  Meanwhile,  highly  specialized  offensive  forces  use  almost  en¬ 
tirely  different  tools  to  attack  networks,  often  attempting  to  remain  un¬ 
detected  for  the  duration  of  the  operation.  TWo  opposing  offensive 
cyber  forces  do  not  meet  in  cyberspace  to  wage  battle,  as  in  other  "ki¬ 
netic”  domains;  even  if  they  did,  the  participants  do  not  find  them¬ 
selves  at  physical  risk— a  fact  that  complicates  efforts  to  erode  an  en¬ 
emy's  capacity  to  wage  cyber  war.22 

In  Cyberdeterrence  and  Cyberwar,  RAND's  Martin  Libicki  explains  in 
detail  the  difficulty  or  impossibility  of  disarming  an  enemy's  cyber  ca¬ 
pabilities:  "Indeed,  since  hackers  need  only  an  arbitrary  computer  and 
one  network  connection,  it  is  not  clear  that  even  a  physical  attack 
could  destroy  a  state's  cyberattack  capabilities.”23  A  state's  most  irre¬ 
placeable  offensive  assets  in  a  cyber  war  are  its  talented  hackers  and 
its  stockpile  of  exploits.  The  state  can  keep  both  of  them  well  protected 
from  physical  and  cyber  attack  unless  it  becomes  so  overwhelmed  that 
the  war's  outcome  is  no  longer  in  doubt.  Even  the  generally  expend¬ 
able  computer  systems  used  by  a  state's  cyber  force  are  difficult  to 
hold  at  risk  through  cyber  means  since  they  can  be  hardened  much 
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more  effectively  than  a  typical  workstation  or  server  without  sacrific¬ 
ing  functionality;  moreover,  an  assailant  likely  would  have  difficulty 
pinpointing  them  on  the  network  in  the  first  place.  A  combination  of 
physical  and  flooding  attacks  to  sever  a  state  completely  from  the  In¬ 
ternet  could  theoretically  deny  its  cyber  forces  an  attack  avenue  (if 
they  cannot  covertly  relocate  physically  to  an  ally  or  unknowing  third 
party).  Doing  so,  however,  would  produce  a  reciprocal  effect  by  pre¬ 
venting  attackers  from  penetrating  the  enemy's  networks. 

All  of  this  implies  that  “offensive  counter  cyberspace,”  a  term  pre¬ 
sented  without  comment  in  AFDD  3-12,  may  prove  meaningless  or  at 
least  radically  different  from  offensive  counterair  (OCA),  after  which  it 
is  clearly  modeled.24  Although  the  standard  definition  of  OCA  is  rather 
broad  (and  could  be  construed  to  include  cyber,  at  least  to  some  ex¬ 
tent),  we  commonly  think  of  it  in  terms  of  diminishing  an  adversary's 
offensive  air  capability  through  application  of  our  own  airpower.25  As 
discussed  above,  we  may  not  realistically  expect  to  substantially  dimin¬ 
ish  an  adversary's  offensive  cyber  capability  through  offensive  cyber 
means  alone  (or  even  by  kinetic  means).  This  does  not  mean  that  of¬ 
fensive  cyber  capability  is  useless— merely  that  these  particular  oppos¬ 
ing  forces  may  not  significantly  affect  each  other,  at  least  not  directly 
or  in  ways  suggested  by  OCA. 

Not  only  do  offensive  cyber  forces  remain  immune  to  attack,  for  the 
most  part,  but  also  the  defensive  forces  can  easily  grow  stronger  over 
the  course  of  a  cyber  war,  even  if  it  is  going  badly.  Specifically,  net¬ 
work  attacks  reveal  vulnerabilities  that  allow  defenders  to  patch  or  oth¬ 
erwise  mitigate  these  offensive  avenues  so  that  the  same  enemy  tools 
may  not  work  for  very  long.  As  Libicki  puts  it,  an  “attacker  will  find  it 
continually  harder  to  hit  similar  targets  because  they  harden  as  they 
recover  from  each  new  attack.”26  Thus,  “cyber  weapons”  are  highly  per¬ 
ishable  but  relatively  slow  and  costly  to  develop,  so  the  potential  for 
attack  may  diminish  over  the  course  of  a  war.27 

Meanwhile,  a  commander  generally  does  not  have  to  accept  greater 
vulnerability  in  order  to  “mass  forces”  elsewhere.  Since  offensive 
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forces  are  probably  separate  and  distinct  from  defensive  forces,  in  cy¬ 
berspace  we  do  not  need  to  consider  how  to  allocate  combat  capability 
to  “cover  flanks”  or  trade  off  offensive  firepower  to  ensure  the  security 
of  lines  of  communication  and  rear  areas.  All  of  these  factors  combine 
to  suggest  that  attrition  may  not  exist  in  cyber  warfare,  at  least  not  in 
the  classic  sense. 

If  cyber  forces  cannot  realistically  perform  counterforce  missions 
within  their  own  domain,  then  the  Air  Force  must  change  the  way  it 
approaches  wartime  objectives  in  cyberspace  versus  the  air.  According 
to  AFDD  3-01,  Counterair  Operations,  “Control  of  the  air  is  normally 
one  of  the  first  priorities  of  the  joint  force.  This  is  especially  so  when¬ 
ever  the  enemy  is  capable  of  threatening  friendly  forces  from  the  air 
or  inhibiting  a  joint  force  commander’s  (JFC's)  ability  to  conduct  op¬ 
erations.”28  Replacing  “the  air”  with  “cyberspace”  in  this  passage  reveals 
how  Airmen  could  draw  an  easy  parallel  and  come  to  the  conclusion 
that  cyber  forces  must  prioritize  attaining  “cyberspace  superiority.” 
This  may  be  possible  in  some  sense,  but  it  may  simply  mean  being 
better  at  attack  and  defense  than  the  enemy.  This  statement  is  not 
quite  as  vacuous  as  it  may  seem  at  first  blush. 

We  do  not  secure  “control  of  cyberspace”  by  conducting  cyber  opera¬ 
tions  against  the  adversary  to  weaken  his  capabilities  while  protecting 
our  own;  rather,  we  field  a  capable,  well-trained,  and  well-resourced 
force,  relative  to  the  adversary's.  Thus,  such  control  is  no  longer  an 
operational  objective  but  something  largely  determined  at  the  outset 
of  hostilities,  a  result  of  strategic  planning  and  preparation  during 
peacetime.  If  we  engage  in  a  cyber  war  with  inferior  forces,  we  cannot 
depend  upon  superior  tactics  to  outmaneuver  the  opponent,  inhict 
greater  losses,  and  turn  the  tide  (for  various  reasons  described  above). 
Thus,  “cyber  superiority”  has  little  use  as  a  doctrinal  term  because  it  is 
not  something  that  we  design  campaigns  to  attain.  Instead,  it  is  a 
shallow  descriptor  of  the  relative  quality  of  forces  on  which  commanders 
will  exert  little  influence  in  wartime.  If  the  enemy  clearly  derives  sub¬ 
stantially  greater  military  benefit  from  cyberspace  (i.e.,  has  “superiority"), 
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a  commander  may  have  only  one  major  lever  available:  Take  cyber¬ 
space  “out  of  play”  to  an  extent,  either  by  isolating  bis  or  her  forces 
from  the  Internet  or  by  doing  the  same  to  the  adversary  through 
physical  (or  even  logical)  attack— obviously  a  drastic  measure  and 
easier  said  than  done. 


Conclusion 

As  a  war-fighting  environment,  cyberspace  differs  fundamentally 
from  the  traditional  physical  domains,  primarily  due  to  its  logical/vir- 
tual  nature.  It  requires  as  much  of  a  reexamination  of  basic  principles 
as  did  air,  relative  to  land  and  sea  warfare.  This  unique  character  chal¬ 
lenges  many  assumptions  about  waging  war.  If  we  cannot  (directly)  ap¬ 
ply  such  elementary  concepts  as  attrition  or  counterforce  to  cyber 
warfare,  then  we  should  be  cautious  about  trying  to  force  other  prin¬ 
ciples  of  warfare  into  cyber  doctrine. 

Few,  if  any,  strong  examples  of  “cyber  war”  exist  from  which  we  can 
draw  combat-proven  lessons  learned.29  Consequently,  individuals  who 
craft  new  doctrine  will  naturally  gravitate  to  the  tried  and  true  in  other 
domains  and  attempt  to  graft  those  bits  of  wisdom  to  this  new  arena. 
However,  even  if  we  can  rationalize  a  way  to  link  cyber  operations  to 
some  venerated  theoretical  framework,  doing  so  may  prove  pointless 
if  it  yields  no  greater  insight  into  waging  war  effectively.  Rather  than 
ask  ourselves  how  a  certain  tenet  applies  to  cyber,  we  should  first  in¬ 
quire  about  whether  it  pertains  to  cyber  in  any  meaningful  way.  Only 
by  honestly  assessing  the  idiosyncrasies  of  cyberspace  can  we  usefully 
apply  established  wisdom  and  forge  ahead  with  new  doctrine.  © 
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this  case  the  disparity  between  the  two  sides  makes  it  hard  to  say  whether  the  cyber  aspect 
of  the  attack  had  any  meaningful  impact  on  the  conflict.  One  would  have  difficulty  advocat¬ 
ing  this  example  as  a  foundation  for  cyber  warfare  doctrine. 


Maj  Sean  C.  Butler,  USAF 

Major  Butler  (BS,  University  of  Southern  California;  MS,  Air  Force  Institute  of 
Technology)  is  a  member  of  the  faculty  at  Air  Command  and  Staff  College, 
Maxwell  AFB,  Alabama.  He  earned  his  commission  through  the  Air  Force  Re¬ 
serve  Officer  Training  Corps  at  the  University  of  Southern  California.  Major 
Butler  served  in  the  23rd  Information  Operations  Squadron,  Lackland  AFB, 
Texas,  developing  network  warfare  tactics.  As  an  assistant  professor  who  di¬ 
rected  and  taught  the  US  Air  Force  Academy's  network  security  course,  he 
guided  the  cadet  team  to  a  win  over  the  other  service  academies  in  the  2004 
Cyber  Defense  Exercise.  At  the  academy,  he  was  one  of  a  group  of  Air  Force 
subject  matter  experts  selected  to  "ops  test"  the  Undergraduate  Network 
Warfare  Training  course  in  2007,  and  he  helped  develop  the  curriculum  that 
became  the  foundation  of  the  Air  Force's  current  cyber  force  training. 
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1st  Lt  Robert  M.  Lee,  USAF 

There  is  nothing  more  difficult  to  take  in  hand,  more  perilous  to  conduct,  or 
more  uncertain  in  its  success  than  to  take  the  lead  in  the  introduction  of  a 
new  order  of  things. 

— Machiavelli 


Cyber  power  will  be  as  revolutionary  to  warfare  as  airpower,  but 
the  current  vectoring  of  the  domain  will  determine  which  na¬ 
tion  will  hold  cyber  dominance  and  to  what  effect.  In  the  early 
years  of  the  cyberspace  domain,  the  United  States  primarily  consid¬ 
ered  cyber  power  a  means  of  establishing  broad  command  and  control 
across  the  war-fighting  domains.  Cyberspace  focused  on  communica¬ 
tion;  indeed,  operational  success  depended  upon  maintaining  the  lines 
of  communication.  As  the  domain  grew,  it  assumed  additional  roles  to 
provide  a  support  force  to  traditional  military  operations  while  experts 
explored  other  roles— a  process  that  occurred  at  the  highest  levels  of 
secrecy.  Many  of  the  first  cyberspace  leaders  realized  that  cyber  assets 
offered  a  number  of  options  for  attack,  defense,  and  exploitation  never 
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before  afforded  to  military  commanders.  In  a  highly  connected  world 
where  substantial  advancements  in  technology  were  common,  the  ca¬ 
pabilities  and  weapons  in  cyberspace  became  even  more  impressive. 

The  current  stage  of  cyberspace  development  resembles  the  interim 
years  between  World  War  I  and  World  War  II,  when  airpower  re¬ 
sponded  to  challenges  by  emerging  as  a  powerful  military  tool.  No 
comparison  does  better  justice  to  contemporary  cyberspace  than  air- 
power  during  those  foundational  years.  At  that  time,  theorists  and  mil¬ 
itary  officers,  including  Gen  Giulio  Douhet,  Marshal  of  the  Royal  Air 
Force  Hugh  Trenchard,  and  Brig  Gen  William  "Billy”  Mitchell,  helped 
guide  the  direction  of  airpower.  As  cyberspace  reaches  its  full  potential 
as  a  domain  of  warfare  equal  to  the  traditional  domains,  we— like  those 
leaders— must  vector  it  properly. 

Toward  that  end,  this  article  discusses  airpower  during  the  interwar  pe¬ 
riod  as  well  as  key  lessons  learned  that  we  can  apply  to  the  cyberspace 
domain.  It  then  offers  three  suggestions  that  address  the  vectoring  of  the 
cyberspace  domain:  empowering  commanders  with  actionable  cyber  in¬ 
telligence,  defending  the  nation  with  a  combined  civilian-military  ap¬ 
proach,  and  developing  a  long-term  strategy  for  the  domain  by  embrac¬ 
ing  the  cyber  culture  and  educating  our  young  leaders  in  cyber. 
Understanding  the  past,  applying  lessons  learned,  and  planning  the  way 
forward  will  allow  us  to  secure  true  cyberspace  dominance. 


The  Interim  Years  of  Airpower 

Prior  to  World  War  I,  the  use  of  aircraft  was  extremely  limited,  and 
many  people  did  not  consider  them  a  viable  military  option.  For  exam¬ 
ple,  in  Aeronautics  (1908)  William  H.  Pickering,  a  notable  American  as¬ 
tronomer,  observed  that  "another  popular  fallacy  is  to  suppose  that  fly¬ 
ing  machines  could  be  used  to  drop  dynamite  on  an  enemy  in  a  time 
of  war.”1  Only  six  years  later,  on  14  August  1914,  a  French  Yoisin  air¬ 
craft  bombed  German  zeppelin  hangars  at  Metz-Frascaty.2  The  idea  of 
conducting  aerial  warfare  quickly  gained  prominence.  The  next  few 
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years  saw  the  development  of  strategic-bombing  aircraft  and  their  use 
in  air  actions  such  as  the  raids  by  German  Gothas  on  England.3  How¬ 
ever,  the  employment  of  aircraft  and  balloons  in  warfare  was  not  new. 
In  China  during  the  third  century,  Gen  Zhuge  Liang  signaled  military 
forces  and  scared  away  enemies  with  balloons  known  as  Kongming 
lanterns.4  Yet,  only  advancements  in  technology  and  powerful  demon¬ 
strations  of  force  in  World  War  I  could  expedite  the  domain's  impor¬ 
tance  and  use. 

The  success  of  airpower  in  that  war,  including  Lt  Frank  Luke  Jr.'s  de¬ 
struction  of  14  heavily  guarded  German  balloons,  convinced  several 
military  leaders  that  aircraft  could  support  the  traditional  domains  of 
land  and  sea  warfare.5  The  debate  at  the  time  did  not  concern  whether 
or  not  to  use  airpower  but  the  means  of  developing  it  and  determining 
which  branch  of  service  would  take  the  lead.  In  the  years  between  the 
world  wars,  aviation  concentrated  on  defending  the  nation  from  adver¬ 
saries.6  However,  some  of  those  defensive  capabilities  also  offered  of¬ 
fensive  possibilities.  The  flexibility  of  airpower  created  intense  debates 
between  the  Army  and  Navy  because  Army  Air  Corps  aircraft  could  fill 
traditional  Navy  roles. 

In  1921  General  Mitchell  used  MB-2  bombers  from  Langley  Field, 
Virginia,  to  sink  three  naval  vessels,  including  the  Ostfriesland,  a  mod¬ 
ern  battleship  captured  from  the  Germans.7  This  test  demonstrated 
that  aircraft  could  independently  attack  offshore  targets.  It  also  showed 
that  if  the  Army  continued  to  empower  the  Air  Corps,  the  Navy  might 
lose  its  primary  mission  of  coastal  defense. 

Partially  in  rebuttal  to  General  Mitchell’s  test,  in  1925  the  Navy  re¬ 
vealed  a  plan  to  increase  the  number  of  its  shore-based  aircraft  from 
334  to  583. 8  Maj  Gen  Mason  Patrick,  chief  of  the  Air  Service,  saw  this 
as  a  move  by  the  Navy  Department  to  take  control  of  the  entire  coastal 
defense  mission.9  This  dispute  between  the  Army  and  Navy  continued 
to  escalate,  and  leaders  of  both  services  worried  that  if  they  could  not 
find  a  solution,  Congress  might  create  an  independent  air  corps.10  At¬ 
tempts  by  the  War  Department  and  Congress  to  satisfy  both  services 
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proved  fruitless.11  Amidst  the  services'  disagreement,  General  Mitchell 
strongly  advocated  the  establishment  of  a  separate  branch  of  service 
and  attempted  to  win  the  support  of  the  public  in  an  effort  to  pressure 
Congress  to  act.12  After  his  court-martial,  he  resigned  from  the  Army 
Air  Service  in  1926  but  continued  to  campaign  publicly  for  an  indepen¬ 
dent  Air  Force.13 

In  1934  Gen  Henry  “Hap”  Arnold  received  a  tasking  to  fly  from  Day- 
ton,  Ohio,  to  Alaska  with  10  Martin  B-10  bombers.  On  the  return  trip, 
he  detoured  from  his  route  by  flying  over  the  ocean  instead  of  across 
Canada,  not  only  demonstrating  the  bombers'  coastal  range  but  also 
enraging  Gen  Douglas  MacArthur,  the  Army  chief  of  staff.14  Neverthe¬ 
less,  members  of  Congress  and  the  War  Department  ultimately  em¬ 
braced  the  claims  of  such  individuals  as  Arnold  and  Mitchell  that  the 
nation  needed  an  independent  Air  Force. 


Lessons  Learned  from  Airpower 

The  cyberspace  domain  need  not  be  a  separate  branch  of  service. 
However,  the  true  potency  of  cyber  power  remains  unrealized,  as  was 
the  case  with  airpower  in  the  early  years  of  the  aerial  domain.  If  we  un¬ 
derstand  this,  we  can  extract  key  lessons  learned  from  the  nascent  aerial 
domain  and  apply  them  to  the  development  of  the  cyberspace  domain. 

Lesson  One:  A  Unified  Military  Approach  Is  More  Beneficial  to 
Securing  a  Domain  of  Warfare 

One  of  the  issues  with  realizing  the  potential  of  the  aerial  domain  con¬ 
cerned  early  competition  between  the  Army  and  Navy  over  its  con¬ 
trol-competition  that  led  to  creation  of  the  Air  Force.  That  service 
acted  as  a  combined  and  vectored  national  approach  to  creating  better 
aerial  technologies  and  strategies.  Had  its  establishment  occurred 
sooner,  the  Air  Force  may  have  generated  even  more  gains.  In  this 
way,  cyber  power  has  an  advantage.  The  cyberspace  domain  does  not 
encroach  upon  the  traditional  roles  of  the  Army,  Air  Force,  or  Navy. 
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The  cyber  mission  can  work  both  independently  from,  and  synergisti- 
cally  with,  the  traditional  war-fighting  domains  across  each  branch. 
This  combined  approach  from  the  services  benefits  the  entire  domain, 
and  although  we  should  encourage  competition  among  the  services, 
each  one  should  play  a  significant  role. 

Lesson  Tlvo:  Airpower  Had  the  Ability  to  Make  Influential  Political 
Statements  That  Transcended  Its  Own  Destructive  Capability 

Cyber  power,  very  much  like  airpower,  can  be  a  destructive  force  if 
wielded  alone  and  to  full  measure.  Early  Airmen  took  pride  in  believ¬ 
ing  that  aerial  attacks  by  themselves  could  lead  to  victory;  however, 
they  understood  neither  its  destructiveness  if  left  unchecked  nor  the 
importance  of  limiting  conflict.15  During  the  Vietnam  War,  President 
Lyndon  Johnson  and  Secretary  of  Defense  Robert  McNamara  met 
weekly  to  discuss  the  targets  that  pilots  would  bomb.  Once  considered 
political  micromanagement,  this  handpicking  of  targets  controlled  the 
political  implications  of  aerial  attacks.16  The  new— and  in  many  cases 
frightening— power  brought  by  bombing  raids  made  a  strong  statement 
not  only  to  North  Vietnam  but  also  to  other  nations  watching  closely. 
Similarly,  cyber  power  can  make  influential  statements,  and  we 
should  not  wield  it  indiscriminately.  A  cyber  attack  that  collapses  the 
global  stock  market,  disables  a  fleet  of  naval  warships,  or  crashes  the 
latest  development  in  aircraft  will  have  enormous  political  conse¬ 
quences. 

Lesson  Three:  Like  Airpower ,  Cyber  Power's  Technologically 
Advanced  Nature  Allows  It  to  Blur  the  Lines  of  War;  Thus,  We  Must 
Wield  It  Responsibly 

Douhet  believed  that  the  range  of  aircraft  would  permit  the  targeting 
of  civilians  and  combatants  alike  in  future  wars.  Airpower,  he  rea¬ 
soned,  did  not  know  the  limits  of  traditional  battlefields  and  could  act 
without  inhibition.  Without  boundaries  on  the  battlefield,  no  areas 
would  feel  safe  to  civilians.17  Cyber  power,  too,  can  quickly  and  specifi- 
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cally  target  networks  and  information  systems  throughout  the  world, 
blurring  the  lines  of  battlefields.  This  characteristic,  in  conjunction 
with  its  destructive  force,  generates  fear  of  its  capabilities  among  the 
population— one  just  as  strong  as  that  from  terrorist  attacks.  Conse¬ 
quently,  we  cannot  underestimate  its  power  to  influence  popular  opin¬ 
ion  and  politics  or  its  ability  to  guide  the  development  of  cyber  capa¬ 
bility.  When  a  nation  uses  cyber  power,  it  must  first  carefully  evaluate 
its  own  citizens'  sense  of  security  and  the  effects  that  cyber  assets  will 
have  on  that  feeling  after  their  employment. 

Lesson  Four:  The  Nature  of  War  Is  Not  Limited  by  Technological 
Advancements 

Nevertheless,  the  idea  that  technology  will  eliminate  the  ugliness  of 
war  has  influenced  military  planners  throughout  history.18  Douhet  be¬ 
lieved  that  the  inherently  offensive  nature  of  airpower,  later  famously 
reinforced  by  Sir  Stanley  Baldwin's  statement  that  “the  bomber  will  al¬ 
ways  get  through,”  would  curtail  bloodshed  during  war.19  To  him, 
bombing  cities  and  attacking  civilians  would  result  in  fewer  deaths 
than  would  the  clash  of  armies.20  The  Italian  general  thought  that  stra¬ 
tegic  bombing  would  break  the  morale  of  civilians,  prompting  them  to 
demand  that  their  leaders  end  wars  early.  Instead,  aerial  bombing 
raids  usually  bolstered  civilian  morale  against  the  known  enemy.21 
Without  proper  attribution,  though,  in  cyberspace  the  enemy  may  re¬ 
main  unknown,  creating  unspecified  effects  on  the  civilian  population, 
perhaps  including  broken  morale.  Regardless  of  the  effects  of  an  un¬ 
known  cyber  attacker,  technology  cannot  end  bloodshed.  Therefore, 
we  must  employ  cyber's  capabilities  with  the  understanding  that 
proper  use  can  limit  casualties  but  that  overuse  can  equally  encourage 
them.  War  will  always  be  an  ugly  thing.22 
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Lesson  Five:  Airpower  Used  a  Varied  Approach  to  Secure  the 
Domain,  and  So  Must  Cyber  Power 

General  Mitchell  did  not  consider  bombers  the  quintessential  form 
of  airpower,  believing  instead  in  the  necessity  of  multiple  types  of 
aircraft,  including  those  with  offensive  and  reconnaissance  missions.23 
His  concept  of  airpower  is  more  akin  to  the  current  diverse  nature 
of  cyber  power  and  varied  cyber  assets,  which  can  support  national 
defense,  intelligence  gathering,  and  offensive  actions— and  do  so  just 
as  well  as  or  better  than  other  military  assets.  Multiple  types  of  aircraft 
enabled  the  development  of  persistent  intelligence,  surveillance,  and 
reconnaissance  (ISR)  aerial  platforms  and  offensive  air  capabilities, 
which  help  ensure  air  dominance  and  support  to  other  war-fighting 
domains.24  The  addition  of  a  variety  of  cyberspace  capabilities  directly 
enhances  already-established  ISR  and  offensive  operations  while 
enabling  the  development  of  new  ones. 


Commanders  and  Actionable  Cyber  Intelligence 

Vectoring  the  cyberspace  domain  should  involve  empowering  com¬ 
manders  with  more  actionable  intelligence  through  cyber  capabilities. 
Cyber  power  offers  critical  advantages  to  campaign  planning;  conse¬ 
quently,  intelligence-based  cyber  operations  should  become  part  of  the 
preparation  of  the  operational  environment  phase,  which  includes 
compromising  enemy  networks  and  readying  cyber  weapons  for  use 
in  the  event  of  conflict.  During  the  posturing  for  offensive  cyber  op¬ 
erations,  information  exploited  from  compromised  systems  can  aid  in 
the  joint  intelligence  preparation  of  the  operational  environment,  im¬ 
proving  commanders'  situational  awareness  of  the  battlefield.25 

Commanders  use  campaign  planning  to  “synchronize  efforts”  and  is¬ 
sue  complementary  guidance.26  The  two  major  phases  of  the  planning 
process— contingency  planning  and  crisis  action  planning— benefit 
from  the  timely  information  and  attack  options  that  cyber  power  pres- 
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ents,  including  an  understanding  of  enemy  capabilities  and  strategies. 
Having  the  assumptions  and  plans  made  in  the  contingency  phase 
more  closely  match  the  crisis  action  phase  expedites  the  joint  opera¬ 
tion  planning  process.27  This  quick-selection  process  empowers  com¬ 
manders  with  the  ability  to  strike  first,  target  precisely,  and  more 
readily  defend  counterattacks.  Information  gathered  from  the  prepara¬ 
tion  of  the  operational  environment  phase  also  decreases  the  effective¬ 
ness  of  the  enemy’s  attempts  at  deception. 

With  access  to  military  doctrine,  enemy  forces  may  choose  to  avoid 
efficient  courses  of  action  or  even  fake  them.  The  combination  of  cy¬ 
ber  and  ISR  capabilities  can  detect  these  deceptions.  Multiple  ISR  plat¬ 
forms  such  as  manned  aircraft,  remotely  piloted  aircraft,  and  satellites, 
as  well  as  human-gathered  intelligence,  contribute  to  creation  of  the 
intelligence  preparation  of  the  battlespace. 28  Individually,  cyber  and 
ISR  severely  weaken  the  enemy's  ability  to  hide  troops,  sensitive  infor¬ 
mation,  operational  plans,  and  centers  of  gravity.  The  combination  of 
the  two  through  imagery  intelligence,  signals  intelligence,  human  in¬ 
telligence,  and  computer  network  operations  provides  an  unprece¬ 
dented  level  of  battlefield  situational  awareness  to  commanders.  This 
awareness  can  also  enable  cyberspace  operations,  whose  capabilities 
include  weapon  systems  platforms  that  degrade,  disrupt,  and  destroy 
an  adversary's  communication,  control,  and  physical  assets.  The  en¬ 
hanced  situational  awareness  that  cyber  and  ISR  give  to  commanders 
aids  in  creation  of  holistic  and  realistic  statements  of  the  commander's 
intent,  as  discussed  in  the  joint  operation  planning  process  model.  Bet¬ 
ter  statements  make  the  planning  guidance  more  accurate  and  assist 
in  the  selection  of  effective  courses  of  action.29 

With  adversaries  relying  heavily  on  cyberspace  for  communication, 
the  number  of  capabilities  offered  to  commanders  to  collect,  exploit,  and 
disrupt  this  information  has  never  been  greater.  These  options,  which 
exist  throughout  all  military  operations,  could  help  minimize  what  mili¬ 
tary  theorist  Carl  von  Clausewitz  referred  to  as  the  fog  of  war.30  How¬ 
ever,  many  commanders  cannot  access  them.  If  shared  properly,  cyber 
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operations  would  increase  the  chances  for  operational  success  in  other 
domains  and  restrict  the  human  and  financial  costs  of  war. 

These  cyber  capabilities  have  not  gone  unnoticed,  though,  and  the 
stand-up  of  US  Cyber  Command  indicates  that  the  cyberspace  domain 
is  moving  in  the  right  direction.31  However,  we  need  to  do  more  to 
supply  commanders  with  actionable  intelligence  and  capabilities 
through  cyber  operations.  Regarding  the  direction  of  cyberspace,  Maj 
Gen  Brett  T.  Williams,  director  of  operations  (J3)  for  US  Cyber  Com¬ 
mand,  called  for  empowering  joint  force  commanders  and  combatant 
commands  (COCOM)  with  cyber  capabilities  and  command  and  con¬ 
trol  of  cyber  operations.  A  lack  of  visibility  of  cyber  components  criti¬ 
cal  to  a  mission's  success  puts  commanders  at  a  disadvantage.  Major 
General  Williams  suggested  creation  of  the  Theater  Cyber  Operations 
Command,  similar  to  a  Theater  Special  Operations  Command,  to  pro¬ 
vide  geographic  combatant  commanders  with  cyber  capabilities  under 
the  control  of  COCOMs.32  Establishing  a  method  similar  to  this  one 
would  give  commanders  more  actionable  intelligence,  and  they  could 
then  request  cyber  capabilities  relevant  to  their  mission.  Having  the  cy¬ 
ber  situational  awareness  to  accurately  request  capabilities  is  one  of  the 
most  critical  components  of  leveraging  cyber  power.  This  aspect  has 
gained  attention  since  Major  General  Williams  made  his  observations. 
In  the  summer  of  2011,  Gen  Keith  Alexander,  head  of  US  Cyber  Com¬ 
mand,  discussed  progress  in  supporting  operations  in  Iraq  and  Afghani¬ 
stan  through  the  deployment  of  expeditionary  teams,  especially  in 
terms  of  combatant  commanders’  ability  to  request  cyber  support.33 

Much  work  in  the  cyberspace  domain  remains  with  regard  to  deliver¬ 
ing  cyber  intelligence  and  capabilities  to  commanders.  After  the  estab¬ 
lishment  of  more  direct  approaches  for  doing  so,  classification  of  the  in¬ 
formation  becomes  the  limiting  factor  in  making  it  actionable.  To 
protect  cyber  capabilities,  we  must  not  reveal  certain  details  and  tech¬ 
nologies  that  would  allow  adversaries  to  counter  or  safeguard  against 
them.  Currently,  however,  the  intelligence  and  information  gathered 
from  cyber  capabilities  are  overclassified.  Commanders  cannot  request 
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capabilities  they  don't  know  about.  Instead  of  providing  processes  to  re¬ 
quest  cyber,  we  must  make  an  effort  to  declassify  cyber  intelligence 
and  information  that  does  not  weaken  cyber  capabilities.  Doing  so  will 
not  only  support  commanders  but  also  enable  tactical-level  leaders  to 
make  reasonable  requests  to  their  leadership  in  support  of  daily  opera¬ 
tions.  Moreover,  the  declassification  of  some  cyber  intelligence  and 
information  would  allow  more  sharing  among  government  agencies 
and  civilian  leaders  who  operate  in  law  enforcement  agencies.  Perhaps 
even  more  important,  the  sharing  of  actionable  cyber  intelligence  that 
could  assist  network  defenses  would  enable  civilian  leadership  to  better 
protect  sectors  such  as  critical  infrastructure.  This  sharing  of  informa¬ 
tion  would  directly  correlate  with  improvements  in  national  security. 


Cyber  Weapons  and  the  Home  Front 

During  these  interim  years  of  cyberspace,  increased  civilian-military 
partnership  for  the  defense  of  the  nation  would  also  prove  advanta¬ 
geous.  Recent  cyber  events  have  shown  that  the  level  of  versatility  and 
expertise  in  select  cyber  weapons  can  overpower  even  carefully 
crafted  defenses.  The  combined  experience  and  knowledge  of  military 
and  civilian  professionals  can  better  protect  against  these  advanced 
threats.  No  better  example  of  advanced  cyber  threats  currently  exists 
than  the  dangers  associated  with  Stuxnet. 

In  June  2010,  the  Stuxnet  worm  came  to  light  and  quickly  gained  no¬ 
toriety  as  one  of  the  most  advanced  pieces  of  malware  ever  discov¬ 
ered.  The  worm,  which  self-replicates  and  spreads  among  information 
systems,  takes  advantage  of  an  unprecedented  four  unpatched  vulner¬ 
abilities— known  as  zero-day  vulnerabilities— while  employing  a  root 
kit  (a  piece  of  code  that  enables  persistent  access),  two  command  and 
control  servers,  and  legitimate  signed  certificates.34  The  code  consists 
of  two  sections:  the  weapon  system  and  the  payload,  the  former  quite 
impressive  and  containing  the  aforementioned  features  but  paling  in 
comparison  with  the  advanced  nature  of  the  payload. 
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Stuxnet  was  specifically  designed  to  target  supervisory  control  and 
data  acquisition  (SC ADA)  systems  and  industrial  control  systems  (ICS). 
More  accurately,  the  payload  specifically  targeted  programmable  logic 
controllers  (PLC)  that  governed  the  centrifuges  at  the  Iranian  nuclear 
facility  in  Natanz.  The  worm's  payload  physically  damaged  the  centri¬ 
fuges  by  spinning  them  up  and  slowing  them  down  to  precisely  the 
appropriate  speeds  for  maximum  degradation.35  Although  the  full  out¬ 
comes  of  the  worm  remain  unknown,  satellite  imagery  indicates  that 
over  1,000  of  the  centrifuges  were  destroyed.36  This  feat  required  not 
only  some  of  the  best  programmers  and  ICS/PLC  engineers  in  the 
world  but  also  a  better  understanding  of  the  secretive  Natanz  facility’s 
layout  than  most  of  the  engineers  that  worked  there  would  have  had.37 

Largely  seen  as  a  cyber  weapon  created  and  employed  by  at  least 
one  nation-state,  Stuxnet  launched  intense  discussions  and  multiple 
academic  papers  on  the  use  of  cyberspace  as  a  domain  of  warfare.  The 
Russian  ambassador  to  the  North  Atlantic  Treaty  Organization  even 
went  so  far  as  to  state  that  the  Stuxnet  worm  could  have  caused  "a  new 
Chernobyl”  if  the  program  had  released  the  uranium  gas  in  the  centri¬ 
fuges  instead  of  causing  degradation.38  Though  operations  had  previ¬ 
ously  taken  place  in  cyberspace,  the  media  portrayal  of  the  power  of 
the  Stuxnet  cyber  weapon  made  the  discussion  of  cyber  warfare  a  very 
public  one.  Stuxnet  did  for  cyberspace  what  the  early  bombings  in 
World  War  I  did  for  airpower;  that  is,  it  brought  the  discussion  to  the 
public  and  undoubtedly  forced  many  corporations  and  nation-states  to 
research  cyber  capabilities  more  heavily.  In  a  way,  this  event— cou¬ 
pled  with  past  cyber  operations  over  the  last  few  decades,  including 
the  attacks  against  government  and  financial  sectors  in  Estonia  in  2007 
and  those  that  coincided  with  the  Russian  invasion  of  Georgia  in 
2008— represents  the  start  of  the  interim  years  of  cyberspace.39 

Although  Stuxnet  infected  and  spread  to  thousands  of  computer  sys¬ 
tems,  its  only  recognized  targets  were  the  centrifuges  at  Natanz.  The 
event  did  not  greatly  affect  systems  in  the  United  States  or  reach  the 
level  of  a  cyber  attack  that  would  push  a  nation  into  war.  However,  ac- 
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cording  to  Secretary  of  Defense  Leon  Panetta,  "The  potential  for  the 
next  Pearl  Harbor  could  very  well  be  a  cyber  attack.”40  This  observa¬ 
tion,  coupled  with  General  Alexander's  statements  that  segments  of 
the  nation's  critical  infrastructure  are  not  prepared  to  handle  cyber  at¬ 
tacks  and  that  this  situation  worries  him  the  most,  makes  obvious  the 
paramount  importance  of  protecting  these  assets  from  cyber  attacks.41 
Furthermore,  Stuxnet  has  shown  that  these  cyber  capabilities  exist  and 
have  been  utilized  by  at  least  one  nation-state. 

The  Stuxnet  story  is  not  over,  though.  The  laboratory  that  discov¬ 
ered  the  piece  of  malware  now  known  as  Duqu  on  14  October  2011 
quickly  recognized  its  relationship  to  the  Stuxnet  malware.  Duqu  dif¬ 
fers  from  Stuxnet  in  that  it  is  a  targeted  remote-access  Trojan  that 
steals  information  instead  of  a  worm  that  damages  centrifuges.42  It  in¬ 
fected  a  number  of  different  sites,  including  universities,  manufactur¬ 
ers,  and  certificate  authorities  in  a  style  of  attack  that  gathers  data  to 
use  in  making  another  Stuxnet-styled  cyber  weapon.43  Although  dif¬ 
ferent  in  style  and  targets,  Duqu  uses  much  of  Stuxnet's  source  code, 
and  the  same  coding  team,  utilizing  a  common  coding  platform 
named  Tilded,  seems  to  have  produced  both  pieces  of  malware.44 

Similar  to  a  "Lego  set,”  the  Tilded  platform  lends  itself  to  putting  to¬ 
gether  different  pieces  or  modules  of  code  to  create  entirely  different 
malware.45  This  platform-based  approach  allows  a  team  to  create  a 
quickly  adaptable  cyber  weapon  that  can  use  different  modules  and 
payloads  for  employment  against  very  different  targets  and  produce 
different  outcomes.  Additionally,  the  malware  created  from  the  plat¬ 
form  can  be  updated  with  different  stealth  measures,  including  the 
changing  of  encryption  algorithms  used  to  hide  its  code— as  occurred 
with  an  updated  version  of  Duqu  found  in  February  2012. 46 

Aerial  warfare  has  taken  a  platform-based  approach  to  weaponry  for 
years.  Instead  of  creating  aircraft  with  single  functions,  the  Depart¬ 
ment  of  Defense  (DOD)  has  purchased  aircraft  such  as  the  F-16,  F-22, 
and  MQ_-1 ,  which  can  fulfill  completely  different  mission  sets  based  on 
their  type  of  payload.  Evidently  this  approach  is  now  catching  on  in 


January-February  2013 


Air  &  Space  Power  Journal  |  69 


Cyber  Focus 


V  Feature 


Lee 


The  Interim  Years  of  Cyberspace 


the  cyberspace  domain,  posing  a  number  of  risks  to  various  aspects  of 
national  security.  A  single  cyber  weapon  platform  could  steal  informa¬ 
tion  from  universities  and  manufacturers  to  create  multiple  cyber 
weapons  that  would  then  attack  aircraft,  Internet  nodes  essential  to 
command  and  control,  air  defense  systems,  and  critical  infrastructure. 

Gen  Norton  Schwartz,  former  Air  Force  chief  of  staff,  stated  that  the 
Air  Force  is  pursuing  "cyber  methodologies  to  defeat  airborne  threats,” 
but  other  sources  have  indicated  that  the  technology  is  already  avail¬ 
able.47  During  testimony  to  the  Senate  Armed  Services  Committee,  Lt 
Gen  Herbert  Carlisle  stated  that  "the  Russians  and  the  Chinese  have  de¬ 
signed  specific  electronic  warfare  platforms  to  go  after  our  high-value 
assets.  Electronic  attack  can  be  the  method  of  penetrating  a  system  to 
implant  viruses.”48  As  traditional  platform-based  weapon  systems  be¬ 
come  more  diverse  and  utilize  more  capabilities,  such  as  advanced  ra¬ 
dar  systems,  they  become  more  vulnerable  to  cyber  attacks.  These  cy¬ 
ber  vulnerabilities  make  the  benefits  of  cyber  weapon  platforms  more 
alluring  to  adversaries.  Such  weaknesses,  combined  with  the  capabili¬ 
ties  demonstrated  by  the  Tilded  platform,  suggest  that  the  threat  of  a 
future  platform-based  cyber  weapon  system  attacking  multiple  DOD 
and  civilian  sectors  is  not  merely  possible  but  probable.  We  cannot  de¬ 
fend  against  the  power  of  such  weapons  without  a  combined  military- 
civilian  approach. 

In  these  interim  years  of  cyberspace,  the  government  must  ensure 
national  security  by  encouraging  cooperation  with  civilian  leadership 
in  sectors  such  as  critical  infrastructure.  Operators,  engineers,  and  de¬ 
velopers  of  that  infrastructure  possess  keen  insight  into  the  systems 
that  demand  active  protection,  yet  they  can  supply  full  details  about 
their  systems  and  their  understanding  of  them  only  when  they  receive 
actionable  intelligence  from  the  government.  Armed  with  declassified 
intelligence,  civilian  counterparts  can  give  better  advice  about  defend¬ 
ing  systems  they  have  operated  for  years.  Just  as  it  makes  sense  to 
classify  some  cyber  offensive  capabilities,  so  should  we  leave  some  cy¬ 
ber  defense  capabilities  classified  as  well.  Some  cyber  defenses, 
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though,  should  be  largely  transparent  so  that  we  can  identify  and  re¬ 
mediate  weaknesses.49 

Even  non-cyber-related  ICS  and  SCADA  system  incidents  can  pro¬ 
duce  significant,  drastic  effects  on  civilian  populations.  On  17  August 
2009,  the  245-meter-high  Shushenskaya  dam— the  largest  in  Russia- 
experienced  an  ICS  failure  that  shook  south  central  Siberia.  A  break  in 
communications  produced  by  a  hre  at  a  power  station  more  than  500 
miles  away  caused  a  sudden  surge  of  water  pressure  that  ripped  apart 
a  940-ton  turbine.  The  incident  resulted  in  the  death  of  75  people  and 
$1.3  billion  in  rebuilding  costs.50  Neither  a  cyber  attack  nor  the  action 
of  any  nation-state,  the  incident  could  have  occurred  as  a  result  of  a 
deliberate  cyber  strike  and  could  have  generated  more  civilian  deaths 
and  financial  costs. 

The  Natanz  nuclear  enrichment  facility  and  the  Shushenskaya  dam 
are  only  two  examples  of  the  uses  of  ICS  and  SCADA  systems,  which 
affect  every  aspect  of  daily  life,  including  the  stock  market,  oil  indus¬ 
try,  electrical  power  grid,  water  filtration,  and  Internet  and  satellite 
communication  networks.  Thus,  these  systems  have  become  one  of 
the  most  sought-after  and  viable  targets  of  cyber  weapons  based  in 
nation-states  and  must  be  treated  accordingly.  We  can  properly  protect 
them  only  with  a  unified  civilian-military  approach. 


Winning  the  Next  Generation 

Lastly,  embracing  a  long-term  strategy  for  developing  the  cyber  cul¬ 
ture  and  educating  the  next  generation  of  cyberspace  operators,  in¬ 
cluding  the  nation's  youth,  would  help  establish  dominance  in  the  cy¬ 
berspace  domain.  Severe  shortages  exist  in  the  availability  of  skilled 
cybersecurity  professionals  to  fill  such  jobs  as  investigative  forensics 
and  programming  at  the  FBI  Cyber  Division.51  Further,  the  DOD  finds 
itself  in  a  difficult  position  in  terms  of  educating  the  next  generation. 
Dr.  Michael  Wertheimer,  the  National  Security  Agency's  director  of  re¬ 
search  and  development,  briefed  members  of  the  Senate  Armed  Ser- 
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vices  Subcommittee  on  problems  in  recruiting  and  retaining  profes¬ 
sionals  in  computer  science,  pointing  out  that  77  percent  of  the 
agency's  information  technology  staff  resigns  rather  than  retires.52  We 
may  need  to  address  the  issue  of  paying  salaries  competitive  with 
those  in  private  industry,  but  our  long-term  strategy  must  look  to  les¬ 
sons  learned  from  the  aerial  domain. 

Excitement  and  a  sense  of  magic  surrounded  airplanes  and  their  pi¬ 
lots  during  the  early  days  of  airpower.  Those  flyers  braved  dangerous 
situations  in  an  unchartered  domain  to  break  records  and  mesmerize 
crowds.  France's  Reims  Air  Meet  of  22  August  1909,  the  world's  first 
major  air  show,  opened  the  door  for  many  more  around  the  globe.53 
Such  shows  and  air  races  both  inspired  future  pilots  and  educated  the 
public  on  the  capabilities  of  airpower.54  The  National  Air  Races,  held  in 
1929  during  the  interwar  years,  attracted  even  more  attention,  drawing 
more  than  half  a  million  people.55 

The  golden  age  of  the  1920s  embodied  the  allure  of  flying.  Pilots 
wanted  to  fly  higher,  faster,  and  farther  than  anyone  else.  Three  times 
between  1919  and  1921,  Army  pilots  broke  the  world  record  for  alti¬ 
tude.56  Cyber  operators,  however,  do  not  have  to  brave  dangerous 
speeds  and  acrobatics,  but  cyber  capabilities  can  certainly  captivate 
audiences  and  inspire  the  next  generation  of  cyber  operators. 

Hacking  and  security  conferences  demonstrate  the  latest  in  security 
advancements,  vulnerabilities,  and  exploits.  These  conferences  also  of¬ 
fer  a  way  for  those  in  attendance  to  network  with  people  from  a  variety 
of  backgrounds  who  all  have  in  common  a  certain  passion  for  cyber¬ 
space.  Unlike  the  early  air  shows,  these  conferences  are  neither  inex¬ 
pensive  to  attend  nor  embraced  by  the  public.  Although  admission  to 
some  well-known  conferences  such  as  DEF  CON  is  as  little  as  $150, 
others  require  thousands  of  dollars,  and  optional  training  costs  even 
more.57  Granted,  these  prices  reflect  both  the  type  of  audience  the  event 
wishes  to  reach  and  operating  costs,  but  persuading  the  mainstream 
public  to  attend  cyberspace-related  conferences  presents  a  problem. 
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Other  orchestrated  conferences  and  advances  in  cyber-related  edu¬ 
cation  benefit  the  domain.  The  DOD's  Cyber  Crime  Center  hosts  an 
annual  cyber  forensics  challenge  and  convention  that  provide  a  won¬ 
derful  opportunity  to  network,  learn  about  the  latest  advances  in  tech¬ 
nology,  and  sign  up  for  training  courses.  The  forensics  challenge  is 
free,  but  the  well-intended  and  beneficial  conference  costs  $500. 58  The 
government  and  DOD  must  host  low-cost  conferences  akin  to  air 
shows  where  they  can  display  capabilities  and  allow  cyberspace  to  cre¬ 
ate  its  own  sense  of  magic  and  allure. 

With  regard  to  making  cyber  deterrence  more  effective,  Gen  James 
Cartwright,  USMC,  retired,  former  vice-chairman  of  the  Joint  Chiefs  of 
Staff,  urged  open  discussion  of  and  training  in  some  cyber  offensive 
capabilities.59  Cyber  conferences  would  be  a  perfect  venue  for  mem¬ 
bers  of  the  DOD  to  showcase  some  of  the  nation's  cyber  capabilities, 
attract  audiences,  and  encourage  the  next  generation  while  deterring 
adversaries.  Moreover,  cyber  operators  could  offer  these  individuals 
low-cost  or  possibly  free  interactive,  appealing  classes  on  the  funda¬ 
mentals  of  cybersecurity  and  hacking,  thus  stimulating  interest  in  the 
domain  they  will  inherit. 

Educating  young  people  and  stirring  their  interest  in  cyber  are  in¬ 
credibly  important.  Although  the  DOD  is  deficient  in  this  area,  it  is 
taking  steps  in  the  right  direction  in  terms  of  educating  and  training 
young  officers  and  enlisted  members  who  have  signed  up  to  take  part 
in  the  cyberspace  domain.  For  example,  the  Air  Force's  Undergraduate 
Cyber  Training  technical  school  at  Keesler  AFB,  Mississippi,  which 
opened  on  21  June  2010,  offers  cyber  officers  a  six-month  training 
course  that  concludes  with  students  earning  their  cyberspace  wings.60 
The  schoolhouse  fails  students  who  do  not  pass  the  blocks  of  instruc¬ 
tion,  either  retraining  them  into  new  Air  Force  specialty  codes  or  sepa¬ 
rating  them  from  the  service. 

The  high-quality  education  offered  at  Undergraduate  Cyber  Training 
reflects  the  efforts  of  the  faculty,  made  up  of  Air  Force  enlisted  and  of¬ 
ficer  personnel  who  have  firsthand  experience  with  and  knowledge  of 
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cyberspace  operations.  These  instructors  work  to  inspire  and  train  the 
next  generation  of  cyberspace  officers  as  they  put  into  practice  Gen¬ 
eral  Schwartz's  belief  that  a  successful  career  should  include  a  tour  of 
duty  as  an  instructor.61  Doing  so  allows  the  faculty  not  only  to  sharpen 
their  skills  and  academic  pursuits  but  also  to  network  and  train  with 
future  squadron  leaders.  This  networking  creates  buy-in  from  both  the 
instructors  and  students,  contributing  to  the  overall  cyber  culture.  The 
domain  is  infused  with  a  sense  of  passion  when  instructors  relate  their 
experiences  and  students  become  excited  about  creating  their  own  sto¬ 
ries.  Instructor  pilots,  war  veterans,  and  participants  in  various  cyber 
missions  can  inspire  members  of  the  next  generation. 

The  early  airpower  culture  even  supported  acts  of  defiance  toward 
superiors  and  nonflyers  to  gain  their  peers'  favor  and  reverence.  Army 
Air  Corps  members  would  elevate  their  status  by  eliciting  trouble  and 
reprimand  from  Army  leaders.  They  embraced  the  role  of  outcasts  and 
found  it  empowering  to  create  a  diverse  group  and  culture  associated 
with  flying.62  Of  course,  military  cyberspace  professionals  need  not 
take  such  bold  steps  or  challenge  authority.  The  current  military  envi¬ 
ronment  favors  growth  of  the  cyberspace  domain,  and,  as  mentioned 
previously,  we  do  not  need  an  independent  cyber  service.  Neverthe¬ 
less,  members  of  the  military  cyberspace  culture  can  feel  very  much 
like  outcasts  because  of  the  domain's  newness  and  its  unexplored,  mis¬ 
understood  capabilities. 

We  must  embrace,  not  shun,  the  infant  cyber  culture.  Education  and 
the  fostering  of  a  competitive,  rewarding  instructor-duty  option  for  mili¬ 
tary  members  will  permit  the  cyber  culture  to  grow  and  develop.  The 
best  cyberspace  operators  should  compete  for  duty  as  instructors  and 
be  rewarded  with  personal  and  career-enhancing  opportunities.  This 
will  have  the  effect  of  continually  updating  the  educational  process  and 
invigorating  the  cyberspace  operators  who  participate.  Consequently,  a 
strong  and  unique  cyber  culture  will  develop,  attracting  and  retaining 
passionate  individuals  dedicated  to  establishing  cyber  dominance. 
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Conclusion 

The  cyberspace  domain  will  forge  its  own  place  in  history  as  a  do¬ 
main  of  warfare.  However,  similarities  with  the  traditional  war-fighting 
domains,  especially  the  aerial  domain,  provide  many  lessons  that  lead¬ 
ers  can  use  to  guide  the  direction  of  cyberspace.  By  understanding 
these  lessons  and  engaging  in  open  dialogues  about  the  direction  of 
the  domain  from  both  a  military  and  civilian  perspective,  we  can  apply 
the  proper  focus  to  cyberspace.  Specifically,  we  must  encourage  ac¬ 
tionable  intelligence  through  cyber  capabilities,  the  partnership  of  ci¬ 
vilian  and  military  professionals  for  national  defense,  and  the  cultiva¬ 
tion  of  a  cyber  culture  by  means  of  educating  the  next  generation. 

Commanders  must  know  what  they  can  request  in  terms  of  support 
from  cyber  operators  that  will  directly  benefit  their  missions.  Refrain¬ 
ing  from  overclassifying  information  that  pertains  to  cyber  intelligence 
and  cyber  capabilities  would  empower  leaders  at  the  tactical,  opera¬ 
tional,  and  strategic  levels  and  facilitate  the  sharing  of  information 
with  civilian  sectors  to  increase  cyber  awareness  and  create  meaning¬ 
ful  defense  strategies.  This  would  bolster  national  security  by  allowing 
civilian  leaders  to  help  defend  their  sectors  instead  of  relying  on  the 
DOD  and  Department  of  Homeland  Security.  Lastly,  by  showcasing 
cyber  capabilities  and  cyber  intelligence  at  learning  events  and  confer¬ 
ences,  we  could  not  only  fortify  cyber  deterrence  but  inspire  members 
of  the  next  generation  to  take  part  in  the  cyberspace  domain.  Those  in¬ 
dividuals  must  remain  the  center  of  our  long-term  strategy  for  protect¬ 
ing  the  domain  and  establishing  cyber  dominance. 

As  General  Alexander  observed,  “If  people  who  seek  to  harm  us  in 
cyberspace  learn  that  doing  so  is  costly  and  difficult,  we  believe  we 
will  see  their  patterns  of  behavior  change.  The  technology  is  ready.”63 
Interested  parties  throughout  the  cyberspace  domain,  including  the 
DOD,  civilian  sectors,  and  the  next  generation,  are  also  ready  for  the 
challenges  ahead.  Cyber  power  is  a  powerful  political  and  military  tool 
that  we  must  guide.  We  must  also  cement  its  place  in  history.  The  in- 
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terim  years  of  cyberspace  are  taking  place  now,  and  leaders  at  all  lev¬ 
els  must  act  accordingly  to  ensure  its  future  success.  O 
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The  Continuing  Political  Value  of  “Denial  of  Enemy  Aims” 

Dr.  Michael  Ryan  Kraig 

Our  discussion  of  the  limited  aim  suggests  that  two  kinds  of  limited  war  are 
possible:  offensive  war  with  a  limited  aim,  and  defensive  war. 

Here  lies  the  origin  of  the  distinction  that  dominates  the  whole  of  war:  the 
difference  between  attack  and  defense. 

— Clausewitz,  On  War 


Introduction: 

Air-Sea  Battle  in  a  Contested  Geopolitical  Environment 

This  article  seeks  to  answer  one  very  large  question:  how  should 
the  United  States  prepare  to  use  military  power  during  peacetime  de¬ 
terrence,  protracted  crises,  and  even  war  to  resolve  conflicting  inter¬ 
ests  with  another  powerful  state,  such  as  China,  when  both  powers 
also  have  substantial  shared  and  interconnected  interests?  The  an¬ 
swer  to  this  question  could  affect  future  crisis  stability  in  East  Asia, 
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billions  of  dollars  of  interconnected  interests,  and  billions  in  US  mili¬ 
tary  spending. 

Traditionally,  the  ideal  military  goal  in  airpower  theory  calls  for  the 
United  States  to  use  superior  or  overwhelming  firepower  in  tandem  with 
coordinated  mobility,  speed,  and  precision  at  an  operational-tactical  level 
of  warfare,  or  the  level  of  "battle,”  to  produce  such  decisive  effects  that 
the  enemy  is  virtually  "disarmed”  before  he  can  even  mount  effective 
operations.1  Crucially,  we  assume  that  this  type  of  battle-level  military 
strategy  would  then  deliver  strategic-level  military  victory— often  implic¬ 
itly  equated  with  total  political  victory  over  a  thoroughly  defeated,  de¬ 
moralized  opponent  who,  as  largely  accepted  by  such  military  plan¬ 
ning,  will  surrender  or  capitulate  entirely  to  US  demands.2  This 
strategy  of  battle,  further  described  below,  has  focused  in  particular  on 
destroying  or  "interdicting”  targets  behind  the  military  front  lines,  of¬ 
ten  on  a  preemptive  or  preventive  (i.e.,  offensive)  basis.  The  presump¬ 
tion  of  such  thinking  is  that  the  most  effective  use  of  airpower  in¬ 
volves  strategically  and  offensively  incapacitating  the  adversary's 
military  machine  via  the  systematic  disabling  or  destruction  of  high- 
value  targets  on  his  home  soil,3  an  approach  we  dub  "strategic  offen¬ 
sive  interdiction”  throughout  the  rest  of  the  article. 

Divorced  from  contextual  political  realities,  the  emphasis  on  strate¬ 
gic  offensive  interdiction  makes  eminent  military  sense.  However,  not 
all  political  and  territorial  rivalries  lead  to  wars  over  completely  op¬ 
posed  political  stakes.  In  advising  military  and  political  leaders  on  how 
to  discriminate  on  the  use  of  force  in  strategic  situations  involving 
peer  competitors,  military  theorist  Carl  von  Clausewitz  argued  that 
they  must  strive  to  understand  the  actual  political  nature  of  the  con¬ 
flict  at  hand  by  answering  the  question,  What  war  are  we  fighting? 
"Generally  speaking,”  wrote  Clausewitz,  "a  military  objective  that 
matches  the  political  object  in  scale  will,  if  the  latter  is  reduced,  be  re¬ 
duced  in  proportion.  .  .  .  Thus  it  follows  that .  .  .  wars  can  have  all  degrees 
of  importance  and  intensity,  ranging  from  a  war  of  extermination  down  to 
simple  armed  observation”  (emphasis  added).4  Indeed,  in  several  pages 
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of  oft-ignored  discourse  on  the  differences  between  Napoleonic-style,  rev¬ 
olutionary  "total  war”  versus  the  average,  more  bounded,  and  limited 
war  aims  of  sovereign  leaders  both  before  1789  and  after  1815,  Clause- 
witz  implicitly  argues  that  leaders  must  identify  the  prevailing  policy 
goals,  beliefs,  and  norms  of  interaction  among  major  powers  in  any 
given  era  of  competition  among  them  and  tailor  the  threat  and  use  of 
force  accordingly.5  This,  in  turn,  raises  the  question,  What  interna¬ 
tional  system  are  we  currently  living  in? 

As  this  article  shows,  today's  East  Asian  security  environment  is 
much  more  fluid  than  the  one  during  the  Cold  War,  in  which  the  global 
and  European  theaters  were  defined  by  two  rigid,  largely  unchanging 
ideological  blocks  of  states  that  refused  each  other  trade,  technological 
sharing,  and  finance,  and  which  sat  poised  on  the  brink  of  World  War 
III.  Nor  is  it  like  the  constant  confrontation  with  Saddam  Hussein  from 
1990  to  2003,  or  like  that  with  Slobodan  Milosevic  in  the  former  Yugo¬ 
slavia  from  the  early  1990s  through  the  1999  bombing  campaign.  In¬ 
stead  of  the  "reinforcing  cleavages"  seen  with  these  adversaries— in 
which  all  economic,  political,  moral,  and  military  issues  became  di¬ 
rectly  counterposed— US  conflicts  of  interest  with  today’s  rising  China 
are  partial  in  scope  and  mediated  strongly  by  dense  and  complex  finan¬ 
cial,  trade,  and  diplomatic  relations.  Conceivably,  this  more  nuanced 
twenty-first-century  geopolitical  reality  may  introduce  significant  con¬ 
straints  on  the  ideal  airpower  goal  of  full  strategic  offensives  against  an 
opponent’s  home  territory  during  a  crisis  or  militarized  dispute. 

To  move  forward  in  the  debate,  the  article  first  describes  in  greater 
detail  the  overall  characteristics  and  thrust  of  strategic  offensive  inter¬ 
diction,  followed  by  a  brief  examination  of  today's  international  system. 
It  then  draws  upon  Clausewitz's  often  overlooked  analysis  of  the  re¬ 
strained  application  of  force  during  limited  interstate  conflicts  between 
great  powers.  As  the  article  demonstrates,  Clausewitz's  analysis  of  vari¬ 
ations  in  both  political  stakes  and  levels  of  warfare  goes  well  beyond  his 
concept  of  “centers  of  gravity”  that  contemporary  readers  so  often  cite 
to  justify  effects-based  weaponry  in  airpower  targeting  theories.6 
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That  said,  one  major  obstacle  to  contemporary  application  of  Clause- 
witz  is  his  back-and-forth  style  both  within  and  across  sections.  He  dis¬ 
perses  myriad  points  on  wars  of  limited  versus  "absolute”  political 
stakes  alongside  an  equal  dispersion  of  arguments  pitched  variously  at 
the  grand-strategic  policy  level,  the  military-strategic  command  level, 
and  the  lower  levels  of  campaigns,  battles,  and,  ultimately,  individual 
combats  and  engagements.  This  constant  variance  between  wars  of  ab¬ 
solute  and  limited  political  stakes,  between  the  offense  and  the  de¬ 
fense,  and  between  different  levels  of  warfare  planning  and  employ¬ 
ment,  can  easily  obfuscate  Clausewitz's  quite  clear  overall  distinction 
between  the  strategic  offensive  and  strategic  defensive  in  wars  be¬ 
tween  peer  competitors  who  are  not  all-out  ideological  competitors.7 
The  article  rectifies  this  problem  by  systematically  bringing  together 
and  interweaving  his  mutually  supporting  analytic  statements  on  lim¬ 
ited  great-power  wars  to  arrive  at  new  concepts  for  military  strategy 
and  operational  planning  for  future  weapons  systems  in  an  evolving 
Asian  geopolitical  environment. 


The  Central  Role  of 

Strategic  Offensive  Interdiction  in  Traditional  Airpower  Theory 

Airpower  advocates  have  a  long  history  of  arguing  that  offensive, 
strategically  decisive  operations  are  the  most  efficient  and  appropriate 
use  of  airpower.  Despite  acknowledgement  of  its  defensive  aspects, 
traditional  notions  are  built  on  the  idea  of  delivering  quick  victories  at 
very  low  cost  in  US  treasure  and  lives  through  decisive  offensives  that 
virtually  disarm  the  adversary  militarily  and  politically  without  having 
to  fight  his  frontline  forces  indefinitely.8 

In  other  words,  the  presumed,  overriding  military-strategic  goal  of 
customary  airpower  doctrine  entails  avoiding  the  high  costs  of  pro¬ 
longed,  attritional  action.  In  turn,  airpower  theory  traditionally  has 
considered  grinding,  protracted  attrition  warfare  the  logical  conse¬ 
quence  of  using  airpower  to  destroy  frontline  enemy  forces  alone, 
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leaving  all  of  their  logistics,  population,  industrial,  energy,  food,  com¬ 
munications,  and  political  command  capabilities  intact  behind  the 
lines.  The  latter  reality  allows  the  enemy  to  replenish  and  replace 
forces  with  new  troops  and  supplies  at  will,  backed  up  by  continued 
intelligence  monitoring  and  command  instructions  via  intact  commu¬ 
nications  facilities.9 

Consequently,  the  US  Air  Force's  procurement,  employment  poli¬ 
cies,  operational  planning,  and,  ultimately,  doctrine  have  generally  fo¬ 
cused  on  hitting  or  interdicting  "strategic”  targets  behind  the  front  line, 
in  many  cases  involving  complete  destruction  of  infrastructure  with 
heavy  civilian  as  well  as  military  uses.  Since  the  early  days  of  flight, 
airpower  theorists  from  Giulio  Douhet,  B.  H.  Liddell  Hart,  and  Billy 
Mitchell  through  Operation  Desert  Storm's  John  Warden  have  envi¬ 
sioned  air  forces  as  providing  the  decisive  “knockout  blow”  that  gen¬ 
erations  of  military  leaders  have  sought  after  studying  the  classic 
Napoleonic-era  works  of  Henri  Jomini  and  Clausewitz.10  For  instance, 
during  the  American  bombing  campaigns  in  Europe  and  Japan  during 
World  War  II,  "strategic”  bombing  sought  to  destroy  the  enemy's  eco¬ 
nomic  infrastructure  and  even  to  punish  and  demoralize  his  popula¬ 
tion  to  the  point  where  either  the  people  would  rise  up  and  depose 
their  leaders  or  simply  find  themselves  completely  unable  to  resist  in¬ 
vasion  forces  on  the  ground.11  The  more  complex  of  these  arguments 
became  known  as  the  "industrial  web  theory,”  which  held  that  disrupt¬ 
ing,  weakening,  or  destroying  the  right  strands  would  collapse  the  en¬ 
tire  systemic  web  needed  to  support  the  Nazi  war  effort.12  During  the 
Cold  War,  the  apparent  war-winning  importance  of  the  strategic  bomb¬ 
ing  campaign  in  World  War  II  transformed  into  the  early  organizational 
and  technological  rise  of  Strategic  Air  Command  over  Tactical  Air 
Command.13  In  short,  putting  pressure  on  the  civilian  populace  and/or 
the  leadership  in  order  to  persuade  enemy  elites  in  the  capital  city  to 
submit  to  maximal  US  political  demands  has  never  been  far  from  air- 
power  theorizing,  whether  attributed  to  Douhet  at  the  beginning  of  the 
twentieth  century  or  Warden  more  recently.14 
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Especially  in  the  latest  round  of  airpower  theorizing,  arguably  initi¬ 
ated  by  Warden,  the  theory  has  addressed  in  one  way  or  another  the 
potentially  revolutionary  ability  of  airpower  to  range  across  the  battle- 
held  and  enemy's  larger  home  territory,  hitting  both  tactical  and  stra¬ 
tegic  targets  simultaneously  via  "parallel  strikes,”  unblocked  by  major 
defensive  hurdles.15  This,  in  turn,  allows  airpower  (and  only  airpower) 
to  strike  simultaneously  key  war-supporting  nodes  or  targets  in  the  en¬ 
emy's  "system”— that  is,  his  overall  socioeconomic  and  military  organi¬ 
zation.  The  latter  includes  factories,  electric  power  facilities,  industrial 
production  facilities,  transport  nodes  such  as  bridges,  and— most  im¬ 
portant  of  all— top  leadership  centers  and/or  other  intermediate  levels 
of  war  command  that  would  (in  theory)  yield  far  more  intense  and  ef¬ 
fective  operational  effects  than  dropping  those  same  munitions  on 
frontline  forces.16 

As  Clausewitz  famously  argued,  however,  it  is  risky  for  military  plan¬ 
ners  to  decontextualize  the  notion  of  effects-based  weaponry  from  the 
most  likely  political  goals  that  politicians  will  seek  in  the  threat  and 
use  of  force  when  confronting  a  peer  competitor.  Ultimately,  every¬ 
thing  depends  on  the  level  of  political  stakes  or,  in  Clausewitz's  terms, 
the  nature  of  the  "political  object.”17  The  policy  goals  of  the  United 
States  in  any  given  geopolitical  dispute,  whether  it  threatens  or  uses 
force,  will  demand  certain  effects  towards  certain  ends.  In  other  words, 
what  exactly  is  the  strategic  political  context  for  military  planning  and 
procurements? 


The  Strategic  Operating  Environment: 

Global  Integration,  Regional  Fragmentation 

The  modus  operandi  of  the  future  is  accommodation  between  leading  pow¬ 
ers  at  certain  times  and  deterrence  at  others — a  flexible  combination  of  the 
main  actors  emerging  to  thwart  the  excessive  ambitions  of  one  of  them. 

— Dilip  Hiro,  After  Empire:  The  Birth  of  a  Multipolar  World 
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The  world  is  entering  a  globalized  age  of  "pragmatic 
multipolarity”— a  loose  network  of  interactions  based  on  tactical  coop¬ 
eration  among  states  to  bolster  their  domestic  identities  and  further 
their  shared  international  interests,  rather  than  a  system  of  compet¬ 
ing,  well-defined  blocs  based  upon  utterly  hostile  ideological  world¬ 
views.  At  a  global  level,  the  reality  of  unprecedented  interstate  and 
transstate  socioeconomic  networks  creating  an  internationalized  form 
of  national  wealth  makes  rising  powers  in  all  continents  fear  the  soci¬ 
etal  costs  of  upsetting  financial  and  trade  flows.  Furthermore,  the  in- 
terelite  agreement  on  norms  of  sovereignty  and  self-determination  of 
peoples  along  ethnic,  religious,  ideological,  and  linguistic  lines  now 
makes  the  idea  of  territorial  transfer  via  warfare  nearly  incomprehen¬ 
sible  in  any  rational  economic  or  cultural  sense.  The  transfer  of  mate¬ 
rial  resources,  manufacturing  wealth,  and  population-based  rural  pro¬ 
ductivity  via  warfare  is  no  longer  profitable,  as  it  demonstrably  was  in 
European  international  orders  past.18  If  a  ruler  today  tried  to  act  like 
Napoleon  or  Frederick  the  Great  by  "grabbing  territory,”  he  or  she  al¬ 
most  immediately  would  face— among  members  of  the  nationalistic 
population  who  identify  culturally,  ideologically,  and  economically 
with  their  own  society— a  highly  motivated,  hateful,  rebellious  enemy 
citizenry  or  "ready-made  insurgency.” 

In  particular,  a  key  part  of  the  US  triumph  over  communism  in  the 
Cold  War  involved  the  production  of  a  seemingly  ingrained,  durable, 
and  lasting  transnational  socioeconomic  class  with  cultural  implica¬ 
tions.  These  global  elites  speak  the  same  professional  language  of  busi¬ 
ness  and  high  finance,  can  translate  pervasive  demands  for  internal 
products  and  resources  into  a  domestically  understood  local  cultural 
idiom,  and  can  transform  local  mores  and  customs  regarding  money, 
trade,  and  information  exchange  into  the  globalized,  Westernized  lan¬ 
guage  of  commerce.19  This  general,  universal  dynamic  is  already 
strongly  evident— and  growing— in  Chinese  society,  in  which  "new 
wealth  barons”  and  a  rising  middle  class  spur  and  sustain  the  contin¬ 
ued  growth  of  higher-education  systems  based  on  the  Western  model.20 
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Granted,  high  levels  of  general-deterrence  stability  among  major 
powers  exist  worldwide.  Nevertheless,  clashes  in  strategic  perceptions, 
political  ideologies,  and  territorial  claims  can  still  very  much  matter  at 
the  regional  level,  for  several  reasons.  First,  there  is  a  lack  of  domestic, 
elite  cultural  commonality  among  very  disparate  sovereign  leadership 
circles  within  the  major  or  rising  powers  of  the  twenty- first  century, 
accompanied  by  little  shared  strategic  culture  on  issues  of  war,  peace, 
interests,  attitudes,  and  perceptions.  Brazil,  India,  China,  Russia,  South 
Africa,  TUrkey,  and  any  other  possible  rising  power  do  not  share  the 
same  domestic  cultural  histories,  the  same  conflict  histories  at  a  geo¬ 
political  level,  or  the  same  experience  with  domestic  politics  and  the 
formation  of  strategic  elites  over  time.  This  is  true  because  none  of 
them  shares  completely  the  same  region,  with  the  partial  exception  of 
Asian  and  Eurasian  overlaps  in  contiguity  between  Russia  and  China 
as  well  as  China  and  India.  Second,  in  ways  similar  to  those  of  old  Eu¬ 
ropean  international  systems,  rising  powers  all  harbor  some  level  of 
nationalist-based  territorial  claims  based  on  legacy  disputes  in  which 
the  identity  of  peoples  overlaps  with  swaths  of  disputed  territory.21 
Third,  and  finally,  the  latter  leads  to  the  paradox  that,  although  the 
value  of  territorial  conquest  in  economic  terms  has  become  almost  nil 
due  to  the  transnational  and  international  nature  of  capital,  labor,  and 
manufacturing  assets,  the  value  of  territory  in  nationalist  terms  (i.e., 
domestic  identity)  has  absolutely  skyrocketed.22  The  United  States 
therefore  faces  a  subtle  geopolitical  equation  in  the  Asia-Pacific:  a  real¬ 
ity  wherein  both  countries  are  in  general  strategic  accord  at  the  level 
of  the  globalized  socioeconomic  order  but  where  both  may  have  value- 
based  disagreements  at  the  regional  level  of  political  stakes. 

For  instance,  in  regard  to  China,  one  Japanese  scholar  and  policy  an¬ 
alyst  has  argued  that  in  the  1990s,  “the  government  needed  national¬ 
ism  for  national  integrity,  leadership  consolidation,  and  legitimacy, 
and  prevention  of  what  they  saw  as  negative  Western  influence  upon 
the  minds  of  the  people.”23  As  a  direct  result,  today  “China's  rise  has 
imbued  the  public  with  self-confidence,  which  interacts  with  China's 
remaining  sense  of  inferiority  and  is  expressed  in  the  form  of  aggressive 
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nationalism.  .  .  .  The  economic  rise  of  China  has  provided  the  basis 
on  which  a  sentiment  of  love  for  and  pride  in  the  Chinese  nation  has 
grown  notably  since  the  mid-1990s.”24  Chinese  leadership,  for  exam¬ 
ple,  has 

stepfped]  up  .  .  .  "patriotic  education"  in  August  1994  [by  distributing]  .  .  . 
the  Guidelines  for  Implementing  Patriotic  Education  ...  [to  reinforce]  the 
power  of  national  integrity  .  .  .  [by]  uniting  people  of  all  ethnicities.  .  .  . 

Since  the  late  1990s[,  in  short,  the  domestic  political  and  developmental 
goal  of  Chinese  leaders]  has  been  "The  Great  Revival  of  the  Chinese  Na¬ 
tion."  .  .  . 

.  .  .  [For  instance,]  Jiang  [Zemin]  stated  that  the  purpose  of  such  educa¬ 
tion  is  to  "  .  .  .  prevent  the  rise  of  the  worship  of  the  West." 

.  .  .  Methods  of  patriotic  education  included  designating  museums  and 
relics  as  "patriotic  education  bases,"  and  making  patriotic  thoughts  the 
main  theme  of  society  by  creating  a  social  atmosphere  in  which  "people 
can  be  infected  and  permeated  with  patriotic  thought  and  spirit  any  time, 
any  place,  in  all  aspects  of  daily  life.”  This  was  to  be  achieved  by  utilizing 
contemporary  media,  including  newspapers,  journals,  radio,  television 
and  films.25 

Given  such  nationalist  sentiments  and  accompanying  territorial  dis¬ 
putes  regarding  Taiwan  and  the  South  China  Sea,  the  United  States 
seeks  to  deter  any  strategic  expansion  of  Chinese  political  interests 
and  military  capabilities  in  ways  that  could  undermine  South  Korean, 
Japanese,  and  Southeast  Asian  nations'  sovereign  economic  and  politi¬ 
cal  security.  In  this  regard,  how  Beijing  treats  Taipei,  including  use  of 
coercive  diplomacy  backed  by  military  exercises,  deployments,  and 
threats,  is  increasingly  becoming  an  implicit  bellwether  for  how  the 
People's  Republic  of  China  (PRC)  may  treat  its  other  neighbors  in  the 
future  as  it  grows  financially  and  technologically.  Equally,  however, 
the  United  States  does  not  want  to  create  in  the  PRC's  mind  a  threat  of 
radical  expansion  of  Japanese  military  and  political  power  in  the  pres¬ 
ent  or  future  Asian  balance  since  such  fears  could  spark  arms  races, 
again  undermining  the  prosperity  flowing  from  a  globalized  system. 
Finally,  neither  the  PRC  nor  the  United  States  (nor  Asian  friends  and 
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allies)  wants  Taiwan's  leaders  to  create  an  unhelpful  international 
precedent  of  unilateral  declarations  of  political  autonomy.26 

In  this  environment,  the  populations  of  important  East  Asian  powers 
such  as  Japan  and  South  Korea  are,  in  essence,  “sitting  on  a  fence.” 
Their  economies  have  become  so  interlinked  with  China's  that  one 
Japanese  international  relations  scholar  opined  that 

the  Japanese  economy  was  lifted  by  the  rapid  growth  of  demand  in  the 
Chinese  market,  and  in  Japan  the  economic  threat  of  China  is  hardly 
talked  about  any  more.  In  2004,  China  became  the  largest  trading  partner 
of  not  only  Japan,  but  also  South  Korea,  Tkiwan,  and  Vietnam.  In  2004, 
for  the  first  time  in  post-World  War  II  history  China  surpassed  the  United 
States  as  Japan's  largest  trading  partner.27 

Yet,  according  to  one  comprehensive  RAND  study  of  Asian  elite  and 
popular  attitudes,  interests,  and  security  perceptions  vis-a-vis  the 
United  States  and  China,  no  country  wants  to  be  the  party  to  “buck” 
the  status  quo  by  becoming  entangled  in  disputes  between  the  PRC 
and  its  neighbors  or  the  PRC  and  the  United  States.  Further,  no  coun¬ 
try  wishes  to  jeopardize  its  prosperity  by  undertaking  a  more  explicit 
and  expanded  East  Asian  military  role.  That  said,  the  same  RAND 
analysis  showed  that  the  popular  viewpoints  of  foreign  policy  issues 
among  the  populations  and  leadership  circles  of  both  countries  could 
“swing”  if  tension,  pressures,  or  threats  escalate  in  any  one  direction— 
and  if  the  PRC  seems  to  become  more  bellicose  and  assertive.28 

All  of  this  points  to  a  deceptively  simple  fact:  US  political  and  territo¬ 
rial  conflicts  of  interest  with  China  are  innately  partial  or  limited  in 
scope,  not  total.  For  example,  although  the  United  States,  China,  and 
Taiwan  do  not  share  a  single  “strategic  culture”  at  the  elite  or  popular 
level  as  to  norms  about  the  uses  of  force,  none  of  them  is  interested  in 
upsetting  the  complex  financial,  manufacturing,  and  trade  ties  that 
have  evolved  among  all  three  sides,  and  none  wants  to  cause  an  esca¬ 
lation  to  all-out  warfare.  Instead,  the  threat  from  China  will  likely  take 
the  form  of  demands  for  relatively  limited  or  partial  geopolitical  gains. 
As  put  by  the  US  Air  Force’s  own  Center  for  Strategy  and  Technology, 
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“Significant  Chinese  force  projection  beyond  Southeast  Asia  will  be  dif¬ 
ficult”  even  though  “China's  military  will  be  sufficient  to  deter  and 
even  repel  almost  any  attempt  at  preemptive  action  against  its  main¬ 
land  or  territories  or  in  its  immediate  vicinity.”29  Instead  of  true  “global 
reach”  as  defined  by  the  United  States,  the  service's  research  team  con¬ 
cluded  that  “China's  military  capability  will  be  greatest  from  the  main¬ 
land  out  to  the  'second  island  chain'— the  region  extending  south  and 
east  from  Japan  to  Guam  in  the  Western  Pacific.”30  In  terms  of  actual 
operational  military  patterns,  it  determined  that  “as  a  regional  air  and 
naval  power,  China  will  routinely  cruise  these  waters  with  its  carrier 
strike  groups.”31  The  ultimate  political  strategic  goal  of  the  PRC,  then, 
would  not  be  “policing  the  global  commons”  but  policing  the  regional 
commons:  “China  will  seek  to  assume  the  role  of  guarantor  of  the  sea 
lines  of  communication  in  the  region,  including  the  strategic  Straits 
[sic]  of  Malacca.  They  will  also  be  capable  of  selectively  impeding  [re¬ 
gional]  commerce  if  they  choose.”32 

Given  these  myriad  complexities,  it  behooves  us  to  ask  whether  cer¬ 
tain  aspects  of  traditional  notions  of  offensive  strategic  interdiction 
would  serve  the  United  States  well  in  future  disputes  with  this  Asian 
rising  power.  As  Clausewitz  pointed  out  180  years  ago,  the  political 
aims  of  limited  war  require  a  different  application  of  force  than  do 
wars  of  unconditional  capitulation. 


Back  to  the  Future: 

Clausewitz  and  Limited  War  between  Major  Powers 

It  follows,  too,  that  war  can  be  a  matter  of  degree. 

— Clausewitz,  On  War 

One  could  summarize  Clausewitz's  most  basic  theoretical  argument 
in  one  dictum  of  particular  importance  for  today's  US  joint  force  struc¬ 
ture:  military  leaders  should  not  fight  wars  with  limited  political  stakes 
as  if  they  are  “absolute”  wars  over  unlimited  political  goals.  Or  in  his 
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own  words,  "Obviously,  wars  waged  by  both  sides  to  the  full  extent  of 
their  national  strength  must  be  conducted  on  different  principles  from 
wars  in  which  policy  was  based  on  the  comparative  size  of  the  regular 
armies.”33  In  his  own  day,  Clausewitz  consistently  made  the  empirical 
observation  that,  beyond  the  continent-spanning,  revolutionary,  highly 
ideological,  and  idealist  "absolute  wars”  of  Napoleonic  France,  most 
wars  were  fought  between  major  powers  that  did  not  necessarily  har¬ 
bor  any  grand  designs  against  the  international  system  itself: 

Only  with  the  rise  of  Bonaparte  have  there  been  campaigns  .  .  .  where  su¬ 
periority  has  consistently  led  to  the  enemy's  collapse.  Before  his  time,  ev¬ 
ery  campaign  had  ended  with  the  winning  side  attempting  to  reach  a  state 
of  balance  in  which  it  could  maintain  itself.  At  that  point,  the  progress  of 
victory  stopped.  .  .  .  This  culminating  point  in  victory  is  bound  to  recur  in 
every  future  war  in  which  the  destruction  of  the  enemy  cannot  be  the 
military  aim,  and  this  will  presumably  be  true  of  most  wars  [between 
great  powers]. 

If  one  were  to  go  beyond  this  point,  it  would  not  merely  be  a  useless  ef¬ 
fort  which  could  not  add  to  [political]  success.  It  would  in  fact  be  a  damag¬ 
ing  one,  which  would  lead  to  a  reaction  [from  the  enemy];  and  .  .  .  such 
reactions  usually  have  completely  disproportionate  effects.34  (emphases 
in  original). 

Thus,  in  terms  of  what  we  now  call  the  tactical  and  operational  lev¬ 
els  of  war,  or  what  Clausewitz  referred  to  as  the  "engagement”  and 
“campaign,”  respectively,  he  argued  that  "an  attacker  can  overshoot  the 
point  at  which,  if  he  stopped  and  assumed  the  defensive,  there  would 
still  be  a  chance  of  success— that  is,  of  equilibrium.  It  is  therefore  im¬ 
portant  to  calculate  this  point  correctly  when  planning  the  campaign. 
An  attacker  may  otherwise  take  on  more  than  he  can  manage  and,  as 
it  were,  get  into  debt.”35 

But  Clausewitz's  life's  work  did  not  start  out  with  notions  of  purpose¬ 
fully  constrained  offensives,  a  reality  that  often  confuses  the  debate.  In 
the  beginning  sections  and  chapters  of  On  War,  Clausewitz  initially 
seemed  to  verify  the  main  threads  in  Jominian  reasoning— that  is,  the 
collapsing  of  the  tactical-combat,  operational-battle,  and  military-strate- 
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gic  levels  into  one  grand  military-political  level  of  action  and  deed, 
thought,  and  decision  making: 

War  is  an  act  of  force,  and  there  is  no  logical  limit  to  the  application  of 
that  force.  Each  side,  therefore,  compels  its  opponent  to  follow  suit;  a  re¬ 
ciprocal  action  is  started  which  must  lead,  in  theory,  to  extremes.  .  .  . 

Theory  .  .  .  has  the  duty  to  give  priority  to  the  absolute  form  of  war  and 
to  make  that  form  a  general  point  of  reference,  so  that  he  who  wants  to 
learn  from  theory  becomes  accustomed  to  keeping  that  point  in  view  con¬ 
stantly,  to  measuring  all  his  hopes  and  fears  by  it,  and  to  approximating  it 
when  he  can  or  when  he  must.36  (emphases  in  original) 

Ultimately,  though,  Clausewitz  was  not  content  merely  to  describe 
this  already-popular  mode  of  thought,  epitomized  by  historical  col¬ 
league  Jomini  in  his  claims  of  having  reached  an  objective  theory  of 
war.  Instead,  Clausewitz  felt  obliged  and  compelled  to  critique  it  se¬ 
verely,  based  on  his  own  quite  extensive  wartime  experience  in  com¬ 
mand  of  Prussian  forces  in  the  counteroffensives  against  Napoleon.  In¬ 
deed,  the  main  difference  between  them— and  a  crucial  one  for  air  and 
sea  power  debates  today— is  that  Jomini's  “theory  of  war”  was,  in  fact, 
a  detailed  discourse  on  “grand  tactics”  or  what  we  may  today  call  the 
“theater-strategic”  level  of  war,  which  simply  assumed  the  goal  of  com¬ 
plete  military  disarming  of  the  enemy  at  the  outset.37  In  marked  con¬ 
trast,  Clausewitz,  in  bringing  in  the  idea  of  political  stakes,  truly  was 
writing  an  overarching  theory  of  war-as-a-whole,  at  all  levels  of  deci¬ 
sion  making.  In  ways  that  bear  on  today's  airpower  debates  concerning 
United  States-China  competition,  Clausewitz  launched  his  own  real¬ 
time,  intellectual  counteroffensive  against  Jominian  thinking  in  two 
major  sections  titled  “Modifications  in  Practice”  and  “War  Does  Not 
Consist  of  a  Single  Short  Blow”: 

Would  this  [total  military  effort  in  one  giant  battle]  ever  be  the  case  in 
practice?  Yes,  it  would  if:  (a)  war  were  a  wholly  isolated  act,  occurring 
suddenly  and  not  produced  by  previous  events  in  the  political  world;  (b) 
it  consisted  of  a  single  decisive  act  or  a  set  of  simultaneous  ones;  (c)  the 
decision  achieved  was  complete  and  perfect  in  itself,  uninfluenced  by  any 
previous  estimate  of  the  political  situation  it  would  bring  about.38 
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Naturally,  Clausewitz  here  sets  up  three  conditions  probably  impos¬ 
sible  to  realize  concretely  in  the  political  world,  but  he  does  so  in  a 
way  that  aptly  describes  in  three  short  points  the  basic  underlying  as¬ 
sumptions  of  Jominian  theorizing.39  In  the  end,  Clausewitz  disagreed 
with  not  only  the  simultaneity  of  large  military  battles,  single  combats, 
or  several  concurrent  campaigns  in  a  purely  technological  sense  (argu¬ 
ably,  something  that  is  now  achievable  with  modern  technologies),  but 
also  the  popular  military-planning  assumption  that  political  decision 
makers  would  be  so  hasty  and  war  hungry  as  to  sign  onto  such  offen¬ 
sive  schemes  at  all  times,  in  all  wars.  As  Clausewitz  cautioned  military 
leaders  in  his  own  period, 

The  interaction  of  the  two  sides  [enemies]  tends  to  fall  short  of  maximum 
effort.  Their  full  resources  will  therefore  not  be  mobilized  immediately.  .  .  . 

...  It  is  contrary  to  human  nature  to  make  an  extreme  effort,  and  the 
tendency  therefore  is  always  to  plead  that  a  decision  may  be  possible  later 
on.  .  .  . 

Warfare  thus  eludes  the  strict  theoretical  requirement  that  extremes  of 
force  be  applied.40 

In  turn,  Clausewitz  argued  that  this  inevitable  feature  of  most  wars 
was  due  to  the  political  stakes  involved  between  the  two  sides,  as  well 
as  the  very  diffuse  nature  of  military  strength,  the  latter  of  which  by 
definition  would  never  become  completely  mobilized  at  any  given  mo¬ 
ment,  given  the  rise  of  modern  nationalism:  "The  resources  in  ques¬ 
tion  are  the  fighting  forces  proper,  the  country,  with  its  physical  features 
and  population,  and  its  allies.  The  country— its  physical  features  and 
population— is  more  than  just  the  source  of  all  armed  forces  proper;  it 
is  in  itself  an  integral  element  among  the  factors  at  work  in  war”  (em¬ 
phases  in  original).41 

In  essence,  Clausewitz  was  clearly  wending  his  way  towards  a  com¬ 
plex  theory  of  warfare  that  did  not  allow  for  one  simple,  linear,  and 
fixed  definition  of  terms  such  as  military  object,  victory,  or  objective  and 
decisive  points  at  the  strategic  level  of  military  planning.  For  instance, 
once  having  admitted  that  the  population  itself  was  a  factor  in  war¬ 
fare— as  Napoleonic  wars  and  revolutions  had  amply  demonstrated 
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throughout  a  highly  nationalistic  Europe— one  had  to  acknowledge 
that  the  question  of  mobilization  would  introduce  not  only  "total  wars” 
of  absolute  offensives  but  also  "limited  wars”  based  on  the  mood  and 
needs  of  the  populations  themselves,  as  interpreted  by  central  deci¬ 
sion  makers.  Thus,  one  could  not  assume  that  an  adversary  (or  one's 
self)  who  possessed  a  large  army  and  a  firm  plan  for  a  major  offensive 
thrust  in  a  giant  battle  would  necessarily  use  all  of  that  force  in  (1)  the 
war  overall  or,  equally,  (2)  in  one  humongous,  clash-of-wills  battle 
based  on  totally  destructive  combat.42 

In  Clausewitz's  view,  if  grassroots  popular  will  were  left  to  its  own 
devices,  the  masses  of  one's  population,  ruled  by  "passions,”  would 
prefer  to  fight  a  Napoleonic  battle  and  a  Napoleonic  war  that  knew  no 
political  or  military  boundaries  or  limits.43  However,  masses  and  pas¬ 
sions  do  not  often  directly  make  high-level  strategic  policy,  a  point 
that  Clause witz  attempted  to  drive  home:  "Since  war  is  not  an  act  of 
senseless  passion  but  is  controlled  by  its  political  object  [as  seen  by  po¬ 
litical  leaders],  the  value  of  this  object  must  determine  the  sacrifices  to 
be  made  for  it  in  magnitude  and  also  in  duration.  Once  the  expenditure 
of  effort  exceeds  the  value  of  the  political  object,  the  object  must  be  re¬ 
nounced  and  peace  must  follow”  (emphases  in  original).44 

Thus,  because  political  goals  are  partial  in  an  international  system 
in  which  major  powers  held  interests  not  only  in  dispute  but  also  in 
common,  political  leaders  (statesmen)  would  likely  want  to  feel  their 
way  forward  during  a  crisis.  They  would  test  with  one  set  of  combats 
or  engagements  to  see  the  opponent’s  response  and  then  reformulate 
military  intentions  and  plans  along  the  way,  with  the  "political  object” 
in  sight  at  each  tit-for-tat  iteration  during  hostilities.  Again,  as  Clause- 
witz  put  it,  "If  war  consisted  of  one  decisive  act,  or  of  a  set  of  simulta¬ 
neous  decisions  [as  Jomini  portrays],  preparations  would  tend  toward 
totality,  for  no  omission  could  ever  be  rectified.  .  .  .  But  if  the  decision 
in  war  consists  of  several  successive  acts,  then  each  of  them,  seen  in 
context,  will  provide  a  gauge  for  those  that  follow.”45 
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Political  decision  makers  are  so  cautious,  not  because  of  an  irrational 
or  overly  sensitive  fear  of  using  military  force  to  its  full  potential  but 
because  of  the  near-chronic  uncertainty  about  adversary  goals,  inten¬ 
tions,  and  strength  or  intensity  of  political  will  over  any  given  issue  in 
dispute.  An  anarchic  international  system  that  purposefully  and  closely 
guards  secrets  about  such  variables  virtually  guarantees  the  latter.46 
Again,  Clausewitz— long  before  the  advent  of  political  science  terminol¬ 
ogies  about  “power  balances”  and  “anarchy"— presciently  drew  out  the 
existence  and  implications  of  this  kind  of  political-level  uncertainty: 

If  you  want  to  overcome  your  enemy  you  must  match  your  effort  against 
his  power  of  resistance,  which  can  be  expressed  as  the  product  of  two  in¬ 
separable  factors,  viz.  the  total  means  at  his  disposal  and  the  strength  of  his 
will.  .  .  .  But  the  strength  of  his  will  is  much  less  easy  to  determine  [than 
his  available  means]  and  can  only  be  gauged  approximately  by  the 
strength  of  the  motive  animating  it.  Assuming  you  arrive  in  this  way  at  a 
reasonably  accurate  estimate  of  the  enemy's  power  of  resistance,  you  can 
adjust  your  efforts  accordingly.  .  .  . 

One  could  [for  example]  .  .  .  conceive  of  a  state  of  balance  in  which  the 
side  with  the  positive  aim  (the  side  with  the  stronger  grounds  for  action) 
was  the  one  that  had  the  weaker  forces.  The  balance  would  then  result 
from  the  combined  effects  of  aim  and  strength.47  (emphases  in  original) 

The  key  phrase  in  this  quotation  is,  “Assuming  you  arrive  in  this  way 
at  a  reasonably  accurate  estimate  of  the  enemy’s  power  of  resistance,” 
the  latter  of  which  depends  upon,  as  Clausewitz  notes,  a  complex  com¬ 
bination  ofboth  the  adversary's  means  and  the  “strength  of  his  will.” 
Given  that  a  haze  almost  always  surrounds  the  second  factor  in  this 
equation,  it  should  come  as  no  surprise  to  Air  Force  planners  that  US 
politicians  often  fail  to  live  up  to  the  dictates  and  expectations  of  tradi¬ 
tional  airpower  theory.  The  following  point  of  Clausewitz 's  bears  re¬ 
peating:  “But  if  the  decision  in  war  consists  of  several  successive  acts, 
then  each  of  them,  seen  in  context,  will  provide  a  gauge  for  those  that 
follow.”  Due  to  the  need  to  assess  the  enemy's  strength  of  will,  it  is  ex¬ 
actly  this  incremental  decision-making  method  that  has  nearly  always 
defined  the  political  approach  to  the  use  of  force  against  peer  competi¬ 
tors.  Barring  the  completely  certain  intelligence  of  political  will  or  the 
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wars  of  ideological  genocide  carried  out  by  obvious  megalomaniacs 
such  as  Adolf  Hitler,  it  probably  always  will. 

Here,  Clausewitz  represents  a  firm  philosophical  body  of  thought 
separate  from  the  more  purist  versions  of  offensive  strategic  interdic¬ 
tion— specifically,  his  recognition  that,  in  warfare  between  major  pow¬ 
ers,  disarming  the  enemy  could  mean  an  infinite  number  of  physical  re¬ 
alities,  depending  upon  the  opponent's  strength  of  will,  which  in  turn 
would  directly  relate  to  the  political  aims  sought: 

We  can  now  see  that  in  war  many  roads  lead  to  success,  and  that  they  do 
not  all  involve  the  opponent's  outright  defeat.  They  range  from  the  de¬ 
struction  of  the  enemy's  forces,  the  conquest  of  his  territory,  to  a  temporary  oc¬ 
cupation  or  invasion,  to  projects  with  an  immediate  political  purpose,  and  fi¬ 
nally  to  passively  awaiting  the  enemy's  attacks  [emphasis  in  original].  Any 
one  of  these  may  be  used  to  overcome  the  enemy's  will  [emphasis  added]:  the 
choice  depends  on  [political]  circumstances.48 

This  political  definition  of  war  and  victory  potentially  runs  contrary 
not  only  to  early  offensive  airpower  theorists  in  the  1920s  and  1930s 
(the  Air  Corps  Tactical  School)  but  also  to  the  primary  mode  of 
thought  of  Air  Force  policy  makers  since  that  time.  The  latter  have 
overwhelmingly  emphasized  offensive  strategic  interdiction  of  key  so¬ 
cioeconomic  and  military-supporting  centers  of  gravity  via  quick  paral¬ 
lel  attacks  on  linked  target  sets,  all  towards  the  purpose  of  total  victory 
or  defeat  of  the  enemy.49  Specifically,  Clausewitz  argued  that  there 
could  never  be  one  schema  or  conceptual  framework  for  decisive,  low- 
cost,  offensive  victory  in  battle  that  would  always  equal  both  military 
victory  and  political  victory  at  a  strategic  level  of  decision  making.  In 
the  end,  it  depended  upon  the  political  war  being  fought,  as  repre¬ 
sented  in  each  side's  demands  of  the  opponent  after  military  defeat— 
with  the  demands  themselves  determining  what  the  concept  of  “de¬ 
feat''  actually  would  mean  in  final  physical  terms: 

When  we  attack  the  enemy,  it  is  one  thing  if  we  mean  our  first  operation 
to  be  followed  by  others  until  all  resistance  has  been  broken;  it  is  quite  an¬ 
other  if  our  aim  is  only  to  obtain  a  single  victory,  in  order  to  make  the 
enemy  insecure,  to  impress  our  greater  strength  upon  him,  and  to  give 
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him  doubts  about  his  future.  If  that  is  the  extent  of  our  aim,  we  will  em¬ 
ploy  no  more  strength  than  is  absolutely  necessary.50 

In  Clausewitz's  mind,  no  such  typology  as  “routine”  attacks  (what 
some  Air  Force  verbiage  tends  to  disparage  as  “attrition  warfare")  ver¬ 
sus  “special”  attacks  (what  twentieth-century  military  theorist  J.  F.  C. 
Fuller  dubbed  “brain  warfare”)  could  exist.51  Rather,  attacks  would  be 
less  or  more  useful,  depending  upon  political  goals.  As  Clausewitz  ar¬ 
gued,  in  regards  to  the  European  continental  flurry  to  adopt  the  “objec¬ 
tive”  French  way  of  war, 

the  French  are  always  writing  about  guerre  d'invasion  [italics  in  original]. 

What  they  understand  by  it  is  any  attack  that  penetrates  deep  into  enemy 
territory,  and  they  would  like  if  possible  to  establish  its  meaning  as  the 
opposite  of  a  routine  attack— that  is,  one  that  merely  nibbles  at  a  frontier. 

.  .  .  [But]  whether  an  attack  will  halt  at  the  frontier  or  penetrate  into  the  heart 
of  the  enemy's  territory  [emphasis  added],  whether  its  main  concern  is  to 
seize  the  enemy's  fortresses  or  to  seek  out  the  core  of  enemy  resistance 
and  pursue  it  relentlessly,  is  not  a  matter  than  depends  on  form  [technol¬ 
ogies,  doctrine]:  it  depends  on  [political]  circumstances.  Theory,  at  least, 
permits  no  other  answer.52 

So,  Clausewitz  was  already  arguing  during  his  lifetime  (in  direct  re¬ 
sponse  to  Jomini  as  well  as  many  practicing  military  colleagues  in  Eu¬ 
rope)  about  an  idea  increasingly  lost  in  both  theorizing  and  concrete 
military  planning  in  the  immediate  post-Napoleonic  era.53  This  notion 
held  that,  although  tactical  combats  and  engagements  needed  to  be 
well  planned  and  decisive  in  and  of  themselves,  ultimately  they  were 
merely  ingredients  in  larger  battles.  The  latter,  in  turn,  could  be  part 
of  very  different  macrolevel  military  strategies  in  service  to  the  policy 
goals  of  war.  That  is,  any  given  engagement  and  any  given  battle  could 
itself  be  part  of  larger,  more  extensive  campaigns  of  strategic  offense 
or  strategic  defense  over  protracted  periods,  spread  out  over  many 
separate  fronts  between  two  adversaries,  together  adding  up  to  the 
grand  strategic  level  of  the  war  as  a  whole  (see  figure). 
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Figure.  Mapping  Clausewitz's  "levels  of  warfare" 

With  this  in  mind,  it  is  hard  to  refute  Clausewitz's  characterization  of 
a  full-scale  war  between  actual  peer  competitors  at  the  great-power 
level: 

If  a  state  with  its  fighting  forces  is  thought  of  as  a  single  unit,  a  war  will 
naturally  tend  to  be  seen  in  terms  of  a  single  great  engagement  [in  accor¬ 
dance  with  the  arguments  of  Jomini].  .  .  .  But  our  wars  today  consist  of  a 
large  number  of  engagements,  great  and  small,  simultaneous  or  consecu¬ 
tive,  and  this  fragmentation  of  activity  into  so  many  separate  actions  is 
the  result  of  the  great  variety  of  situations  out  of  which  wars  can  nowa¬ 
days  arise. 

Even  the  ultimate  aim  of  contemporary  warfare,  the  political  object, 
cannot  always  be  seen  as  a  single  issue.  Even  if  it  were,  action  is  subject 
to  such  a  multitude  of  conditions  and  considerations  that  the  aim  can  no 
longer  be  achieved  by  a  single  tremendous  act  of  war.  Rather  it  must  be 
reached  by  a  large  number  of  more  or  less  important  actions,  all  com¬ 
bined  into  one  whole.54 
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Again,  it  is  important  to  point  out  why  Clausewitz  argues  that  war 
consists  of  different  levels  of  decision  and  different  types  of  planning. 
One  might  argue  that  much  of  this  early  theorizing  is  no  longer  rele¬ 
vant  because  it  was  so  inextricably  based  on  the  reality  of  “land  war” 
and  crude  offensive  technologies  of  the  time.  However,  this  would  be 
misreading.  Clearly,  Clausewitz  argues  that  war  is  nearly  always  a 
halting,  hesitant,  and  mixed  beast,  not  because  of  technology  or  ter¬ 
rain  but  because  of  politics,  both  domestic  and  international:  “This 
fragmentation  of  activity  into  so  many  separate  actions  is  the  result  of 
the  great  variety  of  situations  out  of  which  wars  can  nowadays  arise.”55 
The  word  situations  does  not  mean  simply  different  technologies  or 
terrain  but  different  political  contexts. 


Amending  Notions  of  "Victory" 
in  Wars  of  Limited  Aims  between  Major  Powers 

Eventually,  Clausewitz  prescribed  a  different  approach  to  “victory” 
in  cases  of  “limited  wars”  between  peer  great-power  competitors, 
which  he  saw  as  emerging  from  partial,  rather  than  total,  conflicts  of 
interest  with  the  adversary.  In  interstate  disputes  based  on  only  par¬ 
tially  conflicting  values  or  material  goals,  the  parties  could  skillfully 
use  individually  decisive  (tactical)  “engagements”  or  combats  towards 
rather  less  decisive,  less  definitive  campaigns  and  the  overall  war  as  a 
whole.  By  the  end  of  his  unfinished  tome,  Clausewitz  had  begun  to  de¬ 
lineate  a  type  of  warfare  so  limited  in  political  goals  that  military 
means  and  military  objects  would  also,  in  tandem,  become  directly  in¬ 
fluenced  and  indeed  severely  constrained  in  their  employment  against 
the  adversary— at  least  at  an  operational  or  a  campaign,  if  not  tactical, 
level  of  fighting: 

Suppose  one  merely  wants  a  small  concession  from  the  enemy.  One  will 
only  fight  until  some  modest  quid  pro  quo  [italics  in  original]  has  been  ac¬ 
quired,  and  a  moderate  effort  should  suffice  for  that. 

.  .  .  Neither  side  makes  more  than  minimal  moves,  and  neither  feels 
itself  seriously  threatened. 
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Once  this  influence  of  the  political  objective  on  war  is  admitted,  as  it 
must  be,  there  is  no  stopping  it;  consequently  we  must  also  be  willing  to 
wage  such  minimal  wars,  which  consist  in  merely  threatening  the  enemy, 
with  negotiations  held  in  reserve.56  (emphases  in  original) 

That  is,  one  could  choose  the  destruction  of  the  adversary  at  a  strate¬ 
gic  political  level  via  disarming  his  entire  military  machine  alongside, 
perhaps,  pure  “punishment''  strikes  meant  to  wear  down  the  populace. 
Both  of  the  latter  would  argue  for  decisive,  offensive,  campaign-level 
invasions  of  the  adversary's  territory  and  attacks  on  his  strategic  “ob¬ 
jective  points.”  Alternatively,  one  could  choose  to  let  the  opponent 
strike  first  and  bear  those  costs  via  mounting  a  purely  strategic  de¬ 
fense,  even  as  one's  own  combats  and  battles  themselves  would  have 
mainly  offensive  characteristics  at  a  lower  level  of  action  and  military 
decision  making: 

What  do  we  mean  by  the  defeat  of  the  enemy?  Simply  the  destruction  of 
his  forces  .  .  .  either  completely  or  enough  to  make  him  stop  fighting.  .  .  . 

Engagements  mean  fighting.  The  object  of  fighting  is  the  destruction  or 
defeat  of  the  enemy.  The  enemy  in  the  individual  engagement  is  simply 
the  opposing  fighting  force.  .  .  . 

.  .  .  The  complete  or  partial  destruction  of  the  enemy  must  be  regarded 
as  the  sole  object  of  all  engagements.  .  .  . 

...  By  direct  destruction  we  mean  tactical  success.  We  maintain  there¬ 
fore  that  only  great  tactical  successes  can  lead  to  great  strategic  ones.  .  .  . 
Tactical  successes  are  of  paramount  importance  in  war.57  (emphasis  in 
original) 

As  one  can  see,  therefore,  Clausewitz's  focus  on  the  “strategic  de¬ 
fense”  in  wars  of  “limited  objects”  did  not  derive  at  all  from  military 
passivity  at  the  level  of  counterposed  forces  in  the  battlespace.  We 
must  not  confuse  his  argument  for  strategic  defensive  wars  of  limited 
aims  with  some  claim  that  all  wars  should  be  fought  halfheartedly  or, 
perhaps  more  accurately,  that  individual  combats  or  “engagements” 
should  be  lacking  in  offensive  fervor  and  results.  Clausewitz  clearly 
states,  repeatedly  across  separate  chapters,  that  one  core  thread  binds 
all  military  and  political  planning  together— the  destruction  of  an  ad¬ 
versary's  fighting  forces  at  the  lowest  tactical  or  operational  level. 
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So  much  then  for  the  ends  ...  in  war;  let  us  now  turn  to  the  means. 

There  is  only  one:  combat  [emphasis  in  original].  However  many  forms 
combat  takes,  however  far  it  may  be  removed  from  the  brute  discharge  of 
hatred  and  enmity  of  a  physical  encounter,  however  many  forces  may  in¬ 
trude  which  themselves  are  not  part  of  fighting,  it  is  inherent  in  the  very 
concept  of  war  that  everything  that  occurs  must  originally  derive  from  com¬ 
bat  [emphasis  in  original] . 

.  .  .  Whenever  armed  forces,  that  is  armed  individuals  [emphasis  in  origi¬ 
nal],  are  used,  the  idea  of  combat  must  be  present.  .  .  . 

.  .  .  The  fact  that  only  one  means  exists  constitutes  a  strand  that  runs 
through  the  entire  web  of  military  activity  and  really  holds  it  together  [empha¬ 
sis  added].58 

Or  in  sum,  "It  would  be  a  fundamental  error  to  imagine  that  a  negative 
[defensive]  aim  implies  a  preference  for  a  bloodless  decision  over  the 
destruction  of  the  enemy.  .  .  .  Everything  is  governed  by  a  supreme 
law,  the  decision  by  force  of  arms.  If  the  opponent  does  seek  battle,  this 
recourse  can  never  be  denied  him”  (emphasis  in  original).59 

The  key  to  understanding  Clausewitz  on  this  score,  in  short,  involves 
separating  the  tactical  from  operational  (campaign)  and  strategic  (pol¬ 
icy)  levels  of  both  decision  making  and  actions  in  war.  Much  of  classic 
and  even  contemporary  airpower  theory  concerns  the  necessity  of 
melding  or  fusing  all  such  levels  together  to  allow  for  the  revolution¬ 
ary,  victory-delivering  effects  of  parallel  and  simultaneous  strikes 
against  all  parts  of  the  adversary’s  war  machine.  Clausewitz  is  saying, 
however,  that  in  wars  of  limited  policy  aims,  since  one  does  not  seek 
all-out  victory  against  the  adversary,  striking  behind  the  front  lines 
may  actually  cause  an  escalation  one  does  not  even  want.  That  is,  if 
we  do  not  wish  to  literally  occupy  an  enemy  (as  in  Germany  and  Ja¬ 
pan  in  1945,  Kosovo  in  1999,  or  Iraq  in  2003),  why  do  we  want  to  col¬ 
lapse  his  entire  economic,  war-supporting  "system”  or  "organization”? 
Instead,  one  might,  for  political  reasons,  want  to  wage  brutal  combat 
within  a  purposefully  constrained  battlespace  along  the  frontiers  of 
each  side's  outer  perimeters  (i.e.,  the  outer  limits  of  each  side's 
spheres  of  power  projection): 
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What  is  the  concept  of  defense?  The  parrying  of  a  blow.  ...  A  campaign  is 
defensive  if  we  wait  for  our  theater  of  operations  to  be  invaded.  ...  In 
other  words,  our  [operational]  offensive  takes  place  within  our  own  posi¬ 
tions  or  theater  of  operations.  .  .  .  But  if  we  are  really  waging  war,  we 
must  return  the  enemy's  blows.  ...  So  the  defensive  form  of  war  is  not  a 
simple  shield,  but  a  shield  made  up  of  well-directed  blows.60 

Putting  all  of  this  together,  one  uses  combined  offensive-defensive 
campaigns  (operational  level  of  decision  making)  via  offensive  com¬ 
bats  within  well-ordered  engagements  of  enemy  forces  (tactical  level) 
to  serve  a  larger  military  and  political  strategy  of  denial  of  enemy  aims 
during  a  crisis  or  limited  war  (strategic  level).  According  to  Clausewitz, 
"The  second  question  is  how  to  influence  the  enemy's  expenditure  of 
effort;  in  other  words,  how  to  make  the  war  more  costly  to  him.  The 
enemy's  expenditure  of  effort  consists  in  the  wastage  of  his  forces— our 
destruction  of  them”  (emphases  in  original).61  He  then  refers  to  this  de¬ 
fensive  form  of  war  (at  a  level  of  campaigns)  as  one  with  a  "negative 
aim”  in  which  "victory”  simply  means  that  the  opponent  does  not  him¬ 
self  win:  "If  a  negative  aim— that  is,  the  use  of  every  means  available 
for  pure  resistance— gives  an  advantage  in  war,  the  advantage  need 
only  be  enough  to  balance  any  superiority  the  opponent  may  possess: 
in  the  end  his  political  object  will  not  seem  worth  the  effort  it  costs” 
(emphasis  in  original).62  Thus,  one  uses  very  clear  offensive  victories 
at  the  level  of  combats  and  engagements  to  serve  a  more  defensive 
campaign  and  war  goal  of  "balancing”  the  adversary's  fighting  power, 
making  his  objectives  costly  or  perhaps  even  impossible  to  achieve. 


When  Offensive  Strategic  Interdiction  Is  Not  an  Option 

In  a  US-PRC  crisis  over  any  imaginable  geopolitical  issue,  whether 
Taiwan's  status  or  the  South  China  Sea's  mineral,  oil,  gas,  and  military 
navigation  issues,  US  political  leaders  probably  will  need  offensive 
force  options  at  a  tactical  and  perhaps  even  operational  (campaign) 
level  of  planning.  However,  we  must  funnel  all  such  offensive  combats 
towards  strategically  defensive  political  goals,  in  which  diplomats  will 
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not  want  to  disarm  and  defeat  China  but  bargain  for  new  issue  settle¬ 
ments  that  leave  the  overall  Asian  balance  of  power  in  place  for  the 
most  part.  Therefore,  in  any  future  great-power  crisis  in  the  Asia- 
Pacific  theater,  rather  than  think  in  terms  of  offensive  parallel  opera¬ 
tions  involving  simultaneous  strikes  meant  to  degrade  the  enemy's 
ability  to  communicate  with  (or  command)  his  forces  in  the  held,  US 
decision  makers  would  likely  proceed  along  the  lines  of  Clausewitz's 
description  of  political-military  linkages: 

Thus  there  are  many  reasons  why  the  purpose  of  an  engagement  may  not 
be  the  destruction  of  the  enemy's  forces,  the  forces  immediately  confront¬ 
ing  us.  Destruction  may  be  merely  a  means  to  some  other  end.  In  such  a 
case,  total  destruction  has  ceased  to  be  the  point;  the  engagement  is  noth¬ 
ing  but  a  trial  of  strength.  In  itself  it  is  of  no  value;  its  significance  lies  in 
the  outcome  of  the  trial.63  (emphasis  in  original) 

The  simple  truth  is  that  in  a  world  of  rising  powers  defined  by  com¬ 
plex  interdependence,  neither  side  will  be  particularly  interested  in 
completely  disarming  the  other.  In  a  limited  war,  the  United  States 
eventually  may  want  to  denude  Chinese  capacities  for  power  projec¬ 
tion  in  its  near  abroad,  but  US  decision  makers  almost  certainly  will 
not  want  to  treat  China  as  it  did  Japan  during  World  War  II— or  Saddam 
in  2003  or  Milosevic  in  1999  in  Kosovo  Province— by  forcing  China  to 
retreat  from  positions  on  its  own  internationally  recognized  sovereign 
territory.  Instead,  politically  likely  offensive  and  defensive  actions  will 
occur  in  China's  near  abroad  over  issues  that  do  not  entail  regime 
change  or  complete  capitulation.  Thus,  with  these  partially  competi¬ 
tive  and  partially  cooperative  aspects  of  US-China  relations  well  in 
mind,  smart  military  planners  today  will  indeed  focus  their  efforts  on 
the  reality  of  incremental,  halting,  and  "fragmented”  political  edicts 
during  the  protracted  course  of  a  given  crisis  or  conflict  in  the  Asia- 
Pacific.  Ultimately  this  means  planning  for  campaigns  and  wars  de¬ 
fined  as  "defense  by  denial  of  enemy  aims.”  © 
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Ensuring  the  Health  of  the  Total  Force 
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Mr.  Sean  F.  Conroy 


Following  most  major  conflicts  in  our  nation's  history,  the  mili¬ 
tary  services  downsized,  and  their  active  component  (AC)  and 
reserve  component  (RC)  faced  similar  dilemmas.  Specifically, 
they  had  to  maintain  personnel  readiness,  modernize  equipment,  and 
retain  enough  force  structure  to  meet  defense  strategy  on  a  reduced 
budget.  That  situation  hasn't  changed.  The  war  in  Iraq  is  over,  and  ma¬ 
jor  combat  operations  in  Afghanistan  remain  on  track  to  end  in  2014. 

In  the  wake  of  these  conflicts,  the  Air  Force's  AC  and  RC  find  them- 
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selves  locked  in  a  zero-sum  competition  over  the  future  structure  of 
the  service.1  Driven  by  deep  budget  cuts,  skyrocketing  costs  for  readi¬ 
ness  and  modernization,  and  a  new  defense  strategy,  the  Air  Force 
proposed  retaining  capability  and  saving  money  by  cutting  force  struc¬ 
ture,  primarily  from  the  RC.  Congress  and  the  state  governors,  how¬ 
ever,  disagreed  and  placed  the  Air  Force's  plan  on  hold.  They  asserted 
that  reserve  forces  were  less  expensive  and  attacked  the  Air  Force's  de¬ 
cision  to  cut  the  RC  rather  than  the  AC.  The  fact  is  that  both  the  AC 
and  RC  can  argue  that  they  are  less  expensive,  given  the  right  set  of  as¬ 
sumptions  and  conditions.  Such  a  position  oversimplifies  the  complex 
interdependencies  between  the  components  that  one  needs  to  take 
into  account  when  considering  force-structure  adjustments.  The  ongo¬ 
ing  debate  about  cost  drains  time  and  energy  from  headquarters  staffs, 
obscuring  the  real  work  necessary  to  ensure  the  health  of  the  total 
force  and  its  ability  to  meet  national  defense  requirements  as  we  ad¬ 
just  to  a  postwar  drawdown. 

This  article  introduces  the  concept  of  a  symbiotic  relationship  be¬ 
tween  the  AC  and  RC.  It  provides  a  means  of  elevating  the  component¬ 
centric  cost  debate  that  is  driving  the  AC  and  RC  apart  by  enabling  a 
broader  system-level  dialogue  on  the  health  of  the  total  force— a  dia¬ 
logue  intended  to  bring  the  components  back  together.  The  concept  of 
a  symbiotic  relationship  seeks  to  describe  the  complex,  interdepen¬ 
dent  nature  of  the  AC  and  RC  from  the  perspective  of  personnel  in¬ 
vestment.  Analysis  of  this  concept  informs  the  dialogue  by  illuminat¬ 
ing  the  effects  of  policy  and  resource  decisions  on  the  health  of  the 
total  force. 

Consequently,  to  enable  the  reader  to  gain  an  understanding  of  this 
symbiotic  relationship,  the  article  first  defines  the  concept,  the  context 
in  which  it  arose,  external  and  internal  factors  that  affect  the  health  of 
the  total  force,  and  component  perspectives  on  the  Air  Force's  policy 
of  total  force  integration  (TFI)— a  manifestation  of  the  symbiotic  rela¬ 
tionship.2  Second,  to  demonstrate  the  utility  of  the  concept,  it  offers  a 
vignette  based  on  the  2011  Rated  Summit  plan  to  place  inexperienced 
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AC  fighter  pilots  and  maintainers  in  RC  units.  Although  the  vignette  is 
geared  toward  pilots  and  maintenance,  the  symbiotic  relationship  con¬ 
cept  readily  applies  to  other  war-hghting  communities  resident  in  the 
AC  and  RC  (e.g.,  intelligence,  surveillance,  and  reconnaissance;  civil 
engineering;  and  security  forces).  Third,  the  analysis  includes  a  vision 
for  AC  and  RC  officers  to  follow  as  they  translate  this  concept  into  an 
actionable  personnel-management  suite  of  tools  that  action  officers 
can  use  to  offer  credible  insights  and  recommendations  to  leaders  and 
decision  makers. 


The  Active  and  Reserve  Components: 

Differing  yet  Complementary  Functions 
Grounded  in  Policy  and  Law 

One  commonly  uses  the  term  symbiotic  relationship,  which  denotes 
mutual  beneht  and  dependence,  to  explain  the  association  between 
two  entities  that  need  each  other  to  survive  and  prosper.  In  other 
words,  it  provides  a  positive  sum  for  those  involved,  in  contrast  to  a 
zero-sum  competitive  relationship.  By  design,  the  relationship  be¬ 
tween  the  AC  and  RC  is  interdependent  and  symbiotic  since  both  per¬ 
form  differing  yet  complementary  functions  that  allow  each  to  survive 
and  thrive  as  part  of  a  larger  system.  This  is  the  basic  premise  that  en¬ 
ables  the  AC  and  RC  to  transcend  the  component-centric  zero-sum 
competition  and  reach  a  positive-sum  view  of  the  total  force. 

According  to  former  senator  John  Warner  (R-YA),  “the  Total  Force 
Policy  was  never  intended  to  make  full-time  active  soldiers  and  part- 
time  reservists  mirror  images  of  each  other.  Rather,  it  was  a  creative 
response  to  meeting  the  nation's  post- World  War  II  responsibilities  as 
a  global  power  and  the  hscal  and  demographic  realities  facing  the  De¬ 
partment  of  Defense  (DOD)  after  the  Vietnam  War.”3  Too  often,  people 
think  of  the  RC  simply  as  a  smaller  version  of  the  AC.  Yet,  as  Senator 
Warner  notes,  crafters  of  the  total  force  policy  never  meant  for  this  to 
be  the  case.  A  quick  review  of  DOD  policy  and  title  10  of  the  United 
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States  Code  highlights  the  differing  yet  complementary  function  of  the 
AC  and  RC.  DOD  Directive  5100.01,  Functions  of  the  Department  of  De¬ 
fense  and  Its  Major  Components,  holds  that  the  military  departments 
are  responsible  for  performing  "functions  necessary  to  fulfill  the  cur¬ 
rent  and  future  operational  requirements  of  the  Combatant  Com¬ 
mands,  including  the  recruitment,  organization,  training,  and  equip¬ 
ping  of  interoperable  forces.”4  The  departments  must  also  "establish 
and  maintain  reserves  of  manpower,  equipment,  and  supplies  for  the 
effective  prosecution  of  the  range  of  military  operations.”5  According  to 
10  United  States  Code,  section  10102,  "The  purpose  of  each  reserve  com¬ 
ponent  is  to  provide  trained  units  and  qualified  persons  ...  in  time  of 
war  or  national  emergency,  and  at  such  other  times  as  the  national  se¬ 
curity  may  require,  to  fill  the  needs  of  the  armed  forces  whenever 
more  units  and  persons  are  needed  than  are  in  the  regular  compo¬ 
nents.”6  In  other  words,  the  AC  and  RC  are  not  meant  to  be  stand-alone 
entities.  The  military  departments  need  both  their  AC  and  RC  to  com¬ 
plement  each  another  as  part  of  a  self-reinforcing  system.  This  is  espe¬ 
cially  true  from  a  personnel  perspective. 

The  AC  invests  money  and  time  to  recruit,  train,  and  develop  expe¬ 
rienced  Airmen  for  most  of  its  mission  needs.  Active  duty  service- 
commitment  requirements  represent  the  time  needed  to  gain  a  re¬ 
turn  on  this  initial  training  investment.  When  they  have  completed 
their  service  obligations,  AC  personnel  can  choose  to  serve  in  either 
the  participating  or  nonparticipating  RC  or  separate  from  the  service. 
Those  who  transfer  to  the  RC  represent  a  recurring  return  on  the  origi¬ 
nal  AC  investment  for  the  taxpayer;  thus,  the  Air  Force  avoids  paying 
twice  for  the  skilled  Airmen  it  needs.7  In  this  sense,  AC  and  RC  compo¬ 
nent  functions  are  not  mirror  images  of  one  another.  Rather,  they  are 
different  from  a  component  point  of  view  and  complementary  from 
the  system-level  perspective,  thereby  illustrating  the  symbiotic  rela¬ 
tionship. 

When  accessing  a  prior-service  Airman,  the  RC  gains  the  value  of 
this  individual's  experience  and  skill  but  avoids  the  cost  of  having  to 
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train  a  non-prior-service  Airman.  The  experience  and  skill  that  the  RC 
brings  to  the  total  force  team  are  critical  to  meeting  training  and  opera¬ 
tions  requirements— now  and  in  the  future.  As  such,  views  that  con¬ 
sider  cost  alone  oversimplify  the  relationship  between  the  components 
and  artificially  place  them  in  competition.  From  this  blinkered  point  of 
view,  the  discussion  focuses  on  gaining  scarce  resources  for  the  benefit 
of  the  individual  component  rather  than  on  maintaining  the  health  of 
the  Air  Force,  manifested  by  its  ability  to  carry  out  current  and  future 
demands  for  national  defense. 

Concept:  Considering  the  Symbiotic  Relationship  a  System 

The  symbiotic  relationship  concept  treats  the  AC  and  RC  as  an  open 
system  influenced  by  external  and  internal  factors  within  these  envi¬ 
ronments.8  The  system  responds  to  external  changes  in  the  strategic, 
operational,  economic,  and  technological  spheres  (fig.  1).  It  also  re¬ 
sponds  to  internal  law,  policy,  and  resource  decisions  made  by  the 
president,  Congress,  secretary  of  defense,  and  service  secretaries  and 
chiefs.  To  analyze  this  system,  we  assume  that  we  can  determine  such 
AC  and  RC  personnel  matters  as  annual  training  costs,  demand  for 
training  slots,  attrition,  accession,  experience,  and  demand  for  experi¬ 
ence.  By  monitoring,  measuring,  and  analyzing  these  six  indicators, 
we  expect  to  be  in  a  better  position  to  judge  the  long-term  viability  and 
sustainability  of  the  total  force  (health),  determine  the  ability  to  meet 
demand  (performance),  and  gauge  the  return  on  taxpayer  investment 
(efficiency). 
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Figure  1.  Personnel  flow  in  the  symbiotic  relationship  between  the  AC  and  RC 


The  solid  green  arrows  in  figure  1  represent  the  flow  of  non-prior- 
service  Airmen,  their  accompanying  training  costs,  and  the  demand 
for  training  slots  among  the  components.  The  solid  red  and  yellow  ar¬ 
rows  indicate  Airmen  attrition  and  accessions.  The  mixed  green  and 
yellow  arrows  represent  AC/RC  interaction  in  TFI  associate  units— in¬ 
teraction  that  leverages  RC  experience  to  help  train  and  develop  AC 
Airmen  and  executes  operational  requirements.  Finally,  the  large  blue 
output  arrow  indicates  the  combined  ability  of  the  components  to 
meet  national  security  demands.  Thus,  figure  1  helps  conceptualize 
the  interdependencies  that  bring  the  components  together.  Under¬ 
standing  these  interdependencies  will  assist  in  supplying  the  neces¬ 
sary  insight  to  avoid  legal,  policy,  and  resource  decisions  that  ad¬ 
versely  affect  the  three-component  Air  Force's  ability  to  meet  future 
training  and  operational  demands.  It  also  recasts  the  cost  competition 
between  components  as  a  mutually  supporting  effort  that  meets  war¬ 
fighter  demands,  ensures  the  long-term  health  of  the  total  force,  and 
improves  the  return  on  taxpayer  investment. 
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Theoretically,  this  system  is  at  its  optimal  point  in  terms  of  invest¬ 
ment  /  return  on  investment  when  the  green  non-prior-service  arrows 
pointing  to  the  Air  National  Guard  and  the  Air  Force  Reserve  do  not 
exist.  In  this  condition,  the  RC  would  receive  all  of  its  personnel  as 
prior-service  Airmen— already  trained  and  experienced.  In  practice 
this  theoretical  absolute  is  neither  attainable  nor  entirely  desirable. 
There  is  value  in  accessing  non-prior-service  Airmen  directly  into  the 
RC,  especially  those  who  enter  the  force  with  unique  skill  sets  such  as 
cyber  proficiency  and  specialized  medical  expertise.  That  said,  the  Air 
Force  should  make  every  effort  to  retain  prior-service  Airmen  when 
possible,  given  the  enormous  amount  of  time  and  money  it  has  in¬ 
vested  in  them. 

For  example,  the  Air  Force  invests  as  much  as  $15  million  in  10 
years  to  train  and  develop  an  AC  F-16  pilot,  assuming  no  break  in  fly¬ 
ing  assignments.  According  to  the  fixed  and  variable  costs  contained  in 
Air  Force  Instruction  65-503,  Cost  Factors,  the  service  invests  $5.9  mil¬ 
lion  in  the  initial  two  years  of  training  and  $9.1  million  in  eight  years 
of  flying  experience,  including  operations  and  maintenance,  military 
personnel,  and  munitions  expended  only  during  training.9  When  this 
AC  Airman  enters  the  civilian  world,  eight  years  of  operational  experi¬ 
ence  and  a  $15  million  investment  go  with  him  or  her.  If  the  Airman 
joins  the  RC,  every  time  that  individual  fills  an  operational  require¬ 
ment  or  helps  train  and  develop  less  experienced  Airmen,  the  Ameri¬ 
can  taxpayer  receives  a  recurring  return  on  investment.  The  Airman 
maintains  currency  and  readiness  for  a  fraction  of  the  cost  of  bringing 
a  new  person  into  the  service.  The  same  line  of  thinking  holds  true  for 
the  entire  spectrum  of  Air  Force  career  fields.  The  Air  Force  spends 
less  money  training  and  developing  the  majority  of  Airmen  than  it 
does  on  aviators;  however,  considering  the  large  number  of  Airmen 
resident  in  other  career  fields,  the  magnitude  of  the  total  obligation  of 
time  and  resources  necessary  to  train  and  develop  maintainers,  civil 
engineers,  and  security  forces  may  be  equally  significant.  There  is  an 
exception  to  every  rule— take,  for  example,  individuals  with  unique 
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skill  sets,  mentioned  above.  In  such  cases,  either  industry  or  the  indi¬ 
vidual— not  the  Air  Force— bears  much  of  the  initial  investment. 

Context:  The  Road  to  Symbiosis 

To  understand  the  increasing  dependence  upon  the  RC— and  the  DOD's 
efforts  to  enable  greater  RC  participation— we  must  first  examine  the 
history  of  the  total  force  for  proper  context.  The  Air  Force's  road  to 
symbiosis  began  with  creation  of  the  Air  National  Guard  in  1947  and 
the  Air  Force  Reserve  in  1948.  In  the  early  years,  the  RC  was  solely  a 
strategic  reserve,  characterized  by  its  inferior  equipment  and  lower 
readiness  levels,  compared  to  the  AC.10  It  sought  to  mobilize,  fight  the 
"big  one,"  and  then  demobilize.  TWo  major  events  spurred  the  DOD  to 
supply  the  RC  with  better  equipment  and  integrate  it  with  the  AC. 

First,  the  Korean  War  exposed  the  weaknesses  of  US  military  reserve 
programs  because  many  of  the  units  mobilized  for  combat  were  not 
ready.11  Second,  President  Lyndon  Johnson's  refusal  to  activate  the  RC 
during  the  Vietnam  War  "undercut  [its]  fundamental  purpose  and  mis¬ 
sion.''12  Responding  to  the  president’s  unwillingness  to  employ  the  RC 
and  anticipating  the  post-Vietnam  drawdown,  the  DOD  took  steps  to 
ensure  that  the  country  would  depend  upon  both  the  AC  and  RC  to 
fight  its  future  wars:  “The  President's  Commission  on  the  All- Volunteer 
Armed  Force  gave  considerable  attention  to  the  potential  contributions 
of  the  Guard  and  Reserve,  which  set  the  stage  for  what  would  be 
known  as  the  Total  Force  concept.”13  In  1970,  Secretary  of  Defense  Mel¬ 
vin  Laird  hrst  articulated  that  concept,  and  in  1973,  Secretary  James 
Schlesinger  adopted  it  as  formal  policy  calling  for  "reduced  expendi¬ 
tures  ...  in  overall  strengths  and  capabilities  of  active  forces  and  in¬ 
creased  reliance  on  combat  and  combat  support  units  of  the  Guard  and 
Reserves.”14 

Since  the  implementation  of  this  policy,  each  secretary  of  defense 
has  steadily  increased  reliance  on  the  RC,  further  deepening  and 
strengthening  the  AC  and  RC's  symbiotic  relationship:  "In  1982  Secre¬ 
tary  of  Defense  Caspar  Weinberger  continued  to  support  the  Total 
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Force  Policy.  Weinberger  added  the  'First  to  Fight'  principle  for  re¬ 
source  allocation,  according  to  which  ‘units  that  fight  first  shall  be 
equipped  first,  regardless  of  component.'  ”15 

Secretary  of  Defense  William  Cohen  further  refined  the  policy  dur¬ 
ing  the  Clinton  administration:  "Cohen's  Sept.  4,  1997,  seamless  Total 
Force  policy  memorandum  recognized  the  increased  reliance  on  the 
nation's  Reserve  forces  since  the  end  of  the  Cold  War.  He  called  on  the 
Department's  military  and  civilian  leadership  to  create  an  environ¬ 
ment  that  eliminates  'all  residual  barriers,'  both  structural  and  cultural, 
to  effective  integration  of  the  Reserve  and  active  forces.''16 

More  recently,  Secretary  of  Defense  Robert  Gates's  "Utilization  of  the 
Total  Force”  policy  memo  defined  exactly  how  the  AC  and  RC  would 
support  sustained  military  operations.17  This  policy  recognizes  the 
DOD’s  full  reliance  on  both  the  AC  and  RC  to  fight  our  nation’s  wars.  It 
directs  one-year  mobilizations  at  a  1:5  mobilize-to-dwell  for  the  RC  and 
a  1:2  deploy-to-dwell  for  the  AC,  additional  compensation  for  person¬ 
nel  who  deploy  at  a  greater  tempo,  review  of  the  hardship  waiver  pro¬ 
gram,  and  elimination  of  stop  loss.18 

According  to  the  Defense  Science  Board  Task  Force,  “To  cope  with 
the  increased  demands  and  reduced  resources  the  services  developed 
new  and  innovative  programs,  such  as  the  Air  Expeditionary  Force  de¬ 
veloped  by  the  Air  Force.  The  primary  objective  of  these  changes  was 
to  preserve  maximum  military  capabilities  for  the  nation  given  a  re¬ 
duction  in  resources  of  over  $750  billion  (actual  versus  planned  spend¬ 
ing)  in  the  decade  following  the  fall  of  the  Berlin  Wall.”19  The  services 
also  implemented  policies  to  further  the  total  force;  specifically,  the 
Air  Force  developed  the  air  and  space  expeditionary  force  to  leverage 
capabilities  organic  to  both  the  AC  and  RC  as  a  way  of  meeting  opera¬ 
tional  requirements  and  establishing  a  predictable  process  for  rotating 
forces.20  Predictability  is  especially  important  to  obtaining  RC  partici¬ 
pation  in  the  absence  of  mobilization  authority  by  allowing  members 
of  the  RC  to  plan  and  prepare  their  families  and  employers  for  their 


January-February  2013 


Air  &  Space  Power  Journal  |  1 1 5 


V  Feature 


Johnson,  Kniep,  S.  Conroy 


Symbiotic  Relationship 


absences.  Doing  so  improves  the  likelihood  of  retaining  people  in  the 
RC  and  maintaining  support  for  their  continued  service. 

The  birth  of  the  air  and  space  expeditionary  force  marked  a  signifi¬ 
cant  milestone  in  the  RC’s  transformation  from  a  strategic  reserve  to 
an  operational  entity.  It  became  a  powerful  driving  force  behind  the 
integration  of  the  AC  and  RC  components,  one  that  intensified  follow¬ 
ing  the  terrorist  attacks  of  11  September  2001  and  that  led  to  the  mobi¬ 
lization  of  tens  of  thousands  of  members  of  the  RC  to  serve  in  Afghani¬ 
stan  and  Iraq. 

Pressured  by  more  than  10  years  of  combat,  Congress  made  signifi¬ 
cant  changes  to  the  law  while  the  DOD  and  military  services  enacted 
policies  and  made  resource  decisions  that  firmly  established  the  RC 
as  an  operational  force  on  par  with  the  AC— at  significant  cost.  For 
example, 

per  capita  compensation  for  part-time  reservists,  who  comprise  about  91 
percent  of  the  reserve  force,  increased  nearly  52  percent,  from  $14,400  in 
fiscal  year  2001  to  $22,000  in  fiscal  year  2007.  Per  capita  compensation  for 
full-time  reservists  increased  about  13  percent,  from  $107,000  in  fiscal 
year  2001  to  $121,000  in  fiscal  year  2007.  Of  the  three  cost  areas  that  com¬ 
prise  compensation— cash,  noncash,  and  deferred— deferred  compensa¬ 
tion  costs,  such  as  retiree  health  care  and  pensions,  grew  the  fastest,  in¬ 
creasing  by  nearly  28  percent.21 

The  trend  toward  component  integration  continues.  In  an  effort  to 
increase  member  participation  and  generate  a  better  return  on  the  tax¬ 
payer's  investment,  the  Office  of  the  Secretary  of  Defense  created  the 
continuum  of  service  construct  to  reduce  legal  and  policy  barriers  be¬ 
tween  the  components.  This  construct  mandates  "a  Human  Capital 
strategy  allowing  military  and  civilian  members  to  seamlessly  transi¬ 
tion  in  and  out  of  active  service  to  meet  mission  requirements  and  en¬ 
couraging  a  lifetime  of  service  to  the  nation.”22  Additionally,  on  15  Oc¬ 
tober  2010,  the  secretary  of  the  Air  Force  initiated  the  "3-1”  Integrated 
Personnel  Life  Cycle  Project,  designed  to  reduce  waste  and  enhance 
the  continuum  of  service  by  combining  the  three  separate  regular,  Air 
Force  Reserve,  and  Air  National  Guard  personnel  systems  into  one  and 
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standardizing  Air  Force  instructions  among  the  components  where 
possible.  This  action  should  make  it  easier  for  Air  Force  personnel  to 
transition  between  the  AC  and  RC,  thereby  improving  the  return  on 
the  taxpayer's  investment. 

External  and  Internal  Factors  Affecting  AC-to-RC  Transition 

Many  factors  influence  the  availability  and  willingness  of  an  AC  Air¬ 
man  to  transition  to  the  RC— some  internal  and  some  beyond  the  con¬ 
trol  of  the  Air  Force.  External  factors  such  as  a  high  operations  tempo, 
a  weak  economy,  a  decreasing  force  structure,  and  an  increasing  de¬ 
mand  for  airline  pilots  and  maintenance  technicians  certainly  he  be¬ 
yond  the  scope  of  the  service.  Others,  such  as  resource  and  policy  de¬ 
cisions  that  affect  incentives  or  the  lack  thereof  for  AC  members  to 
transition  to  the  RC,  do  fall  within  the  Air  Force's  ability  to  influence, 
if  not  control  outright. 

High  operations  tempo  and  the  health  of  the  economy  work  hand-in- 
hand  to  influence  an  Airman's  decision  to  move  from  the  AC  to  the 
RC.  The  latter's  operations  tempo,  though  less  than  that  of  the  AC, 
may  still  cause  problems  for  an  individual  who  desires  a  civilian  ca¬ 
reer.23  The  Military  Officers  Association  of  America,  representing  both 
Reserve  and  Guard  members,  recognizes  that  "civilian  employers  are 
increasingly  reluctant  to  hire  reservists  who  maybe  subject  to  re¬ 
peated,  extended  absences  from  the  civilian  workplace.”24  From  an 
economic  perspective,  when  jobs  are  plentiful,  people  have  less  incen¬ 
tive  to  join  the  military,  just  as  those  who  do  join  have  less  incentive 
to  stay.25  The  opposite  is  true  when  the  economy  is  weak  and  jobs  are 
scarce.  Under  these  conditions,  AC  retention  tends  to  increase,  thus  re¬ 
ducing  the  RC's  accessions  of  prior-service  Airmen.26  Currently,  both 
of  these  factors  contribute  to  the  decrease  in  the  number  of  AC  Air¬ 
men  transitioning  to  the  RC. 

A  diminishing  AC  force  structure  leaves  fewer  Airmen  available  to 
move  to  the  RC.  Between  1988  and  2011,  AC  end  strength  dropped  by 
42  percent  while  the  Reserve  and  Guard  reduced  by  13  percent  and  8 
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percent,  respectively.27  In  the  past,  managing  the  total  force  was  not  as 
sensitive  to  inefficiencies  induced  by  component-centric  management 
because  of  the  larger  force  structure.  Today,  our  reduced  structure  has 
us  living  on  the  margins  of  sustainability. 

Forecasts  indicate  that  the  airline  industry  will  require  a  significant 
number  of  pilots  and  maintainers  in  the  near  future.  According  to  an 
industry  report  by  the  Boeing  Corporation,  "To  operate  and  maintain 
the  airplanes  that  will  be  added  to  the  fleet  over  the  next  20  years,  the 
world's  airlines  will  need  an  additional  466,650  trained  pilots  and 
596,500  maintenance  personnel.”28  That  equates  to  97,320  pilots  and 
137,000  maintainers  for  North  America  alone.29 

Internal  factors,  such  as  the  lack  of  incentives  specifically  designed 
to  capture  AC  talent  and  place  it  in  the  RC,  reduce  the  appeal  of  transi¬ 
tioning  from  the  AC  to  the  RC.30  In  2011  the  AC  attempted  to  coordi¬ 
nate  with  the  RC  as  it  cut  some  2,000  officers  from  its  rolls,  but  it  did 
so  without  any  monetary  encouragement  to  attract  those  people  to  the 
RC.  The  Air  Force  did  give  Airmen  incentive  to  leave  the  service  alto¬ 
gether  by  offering  voluntary  separation  pay  calculated  at  1.25  times 
base  pay.31 

These  factors  combine  to  pose  a  challenge  to  the  health  of  the  total 
force  and  its  ability  to  remain  viable  and  sustainable  as  the  budget  con¬ 
tracts.  Although  the  Air  Force  cannot  influence  many  of  these  factors, 
it  does  control  force-management  policies.  To  the  point,  component¬ 
centric  personnel  policies  and  component  choices  made  to  address 
component-perceived  needs  can  lead  to  negative  second-  and  third- 
order  effects  on  the  total  force.  These  inefficiencies  drive  higher  costs 
and  may  ultimately  imperil  our  ability  to  perform  the  national  defense 
mission.  If  we  properly  address  the  symbiotic  relationship  as  a  system, 
it  can  inform  personnel-management  policies  that  can  help  mitigate 
the  need  for  the  RC  to  continue  investing  more  of  its  scarce  resources 
to  recruit,  train,  and  develop  a  growing  number  of  non-prior-service 
Airmen  to  fill  its  ranks.  Doing  so  will  better  leverage  the  AC's  invest- 
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ment  function  along  with  the  RC's  return  on  investment  function,  thus 
increasing  the  overall  efficiency  of  the  total  force. 

Perspectives:  Total  Force  Integration,  a  Necessity  with  Benefits 

Faced  with  using  declining  resources  to  meet  requirements,  the  AC 
supports  the  TFI  policy  and  the  various  associated  constructs  out  of 
necessity.32  It  recognizes  the  capability  resident  in  the  RC  as  a  pool  of 
highly  experienced  Airmen  capable  of  fulhlling  unmet  AC  training  and 
operational  demands: 

Starting  in  March  of  1968,  the  [AC]  began  tapping  the  Guard  and  Reserve 
to  perforin  Military  Airlift  Command  operational  missions  through  the  Re¬ 
serve  Associate  Program.  .  .  .  The  integration  concept  is  quite  simple.  Re¬ 
serve  crews  fly  operational  missions  with  [AC]  aircraft  that  otherwise 
would  remain  inactive  between  [AC]  missions.  The  initial  associate  con¬ 
cept  increased  the  operational  capacity  of  the  Air  Force  and  helped  lay 
the  foundation  for  further  component  integration  .  .  .  years  later.33 

Initially  developed  for  the  air  mobility  mission,  the  associate  construct 
now  covers  all  of  the  Air  Force's  core  functions. 

From  the  RC's  point  of  view,  the  TFI  benefits  are  numerous.  First, 
TFI  demands  that  the  RC  remain  a  category-one  (C-l)  trained  and 
ready  force  with  access  to  AC  equipment  that  is  interoperable  with  RC 
equipment.34  The  combination  of  C-l  readiness  and  interoperable 
equipment  ensures  that  the  RC  remains  relevant  in  peace  and  war.  In 
TFI  units,  the  RC— and,  to  a  greater  extent,  the  total  force— benefits 
from  its  close  contact  with  the  AC,  a  situation  that  can  facilitate  future 
accessions  of  prior-service  Airmen.  Furthermore,  Airmen  who  previ¬ 
ously  served  in  TFI  units  are  more  likely  to  understand  the  differences 
between  the  AC  and  RC.  They  will  have  an  appreciation  for  the  citizen- 
Airman  construct— the  RC  member's  need  to  balance  a  part-time  mili¬ 
tary  career,  a  full-time  civilian  career,  and  family.  They  will  also  have 
greater  appreciation  of  the  transferable  civilian  skills  that  an  RC  mem¬ 
ber  offers  to  the  AC.  Airmen  with  experience  in  associate  units  argu¬ 
ably  are  better  prepared  to  lead  those  units  and  deployed  wings  that 
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combine  AC  and  RC  assets.  Moreover,  they  can  assume  senior  leader¬ 
ship  roles  on  the  high-level  staffs  that  create  policy  and  make  resource 
decisions  affecting  the  total  force.  Ultimately,  those  with  TFI  experi¬ 
ence  find  themselves  in  a  better  position  to  maximize  the  combat  ca¬ 
pability  of  associate  units  and  manage  an  increasingly  integrated  Air 
Force. 


2011  Rated  Summit  Plan:  Fighter  Pilot  Absorption 
Plan  versus  Reduced  Reserve  Component  Experience 

After  the  2011  Rated  Summit,  the  Air  Force  made  a  series  of  deci¬ 
sions  intended  “to  ensure  the  viability  and  sustainability  of  the  rated 
force.”35  Addressing  AC  pilot  absorption  is  necessary  to  pave  the  way 
for  the  F-35  conversion.  Gen  Norton  Schwartz,  former  chief  of  staff  of 
the  Air  Force,  directed  the  “increase  of  fighter  pilot  production  to  278 
pilots  per  year”  and  the  establishment  of  “active  associations  at  each 
RC  fighter  base  with  the  goal  of  providing  no  less  than  171  absorbable 
pilot  billets.”36  The  plan's  success  relies  on  leveraging  greater  RC  expe¬ 
rience  to  develop  the  skills  of  the  AC's  less  experienced  Airmen.  This 
also  holds  true  for  aircraft  maintainers,  without  whom  the  pilots  could 
not  fly. 

Experience  levels  across  the  total  force  are  declining,  driven  by  re¬ 
tirements  and  a  large  influx  of  non-prior-service  Airmen.37  This  dy¬ 
namic  is  most  pronounced  in  the  Reserve,  which  suffered  a  10  percent 
drop  in  total  experience  for  all  Air  Force  specialty  codes  from  2007  to 
2011,  compared  to  2.1  percent  for  the  Air  National  Guard  and  4.5  per¬ 
cent  for  the  AC.38  If  we  drill  down  to  the  logistics  career  field,  which 
houses  aircraft  maintenance,  we  find  a  14.5  percent  decline  in  the  Re¬ 
serve  compared  to  3.3  percent  for  the  Guard  and  2.9  percent  for  the 
AC.39  These  statistics  alone  do  not  tell  us  if  this  trend  is  a  potential 
problem  or  part  of  a  manageable  cycle— we  need  more  analysis  if  we 
wish  to  fully  understand  the  impact  of  experience  levels  on  the  health 
of  the  total  force.  However,  this  dynamic  should  raise  a  red  flag,  given 
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the  fact  that  the  RC  must  train  and  develop  the  AC's  Airmen  even 
though  its  own  force's  experience  is  declining. 

During  the  past  decade,  the  global  war  on  terrorism  and  overseas 
contingency  funds  enabled  the  operational  Reserve  to  fulfill  combatant 
commanders'  requirements.  They  also  helped  the  RC  gain  needed  ex¬ 
perience  and  hone  the  skills  of  its  non-prior-service  Airmen  during 
multiple  wartime  deployments.  Going  forward,  the  Air  Force  will  not 
have  this  additional  money  to  develop  a  significant  portion  of  its  force, 
thereby  requiring  the  Reserve  and  Guard  to  dedicate  a  significant 
amount  of  their  own  money  to  do  so.40  From  2006  to  2011,  the  Guard's 
yearly  outlay  for  training  non-prior-service  Airmen  more  than  dou¬ 
bled,  from  $52.4  million  to  $113.9  million.41  On  top  of  that,  the  Guard 
needs  an  additional  $63.4  million  for  its  seasoning  program,  which  al¬ 
lows  non-prior-service  Airmen  to  become  proficient  at  their  jobs  upon 
completion  of  initial  technical  training.42  In  2011  the  Reserve  spent 
nearly  $400  million  on  recruiting,  training,  and  seasoning  non-prior- 
service  Airmen,  including  more  than  $300  million  on  enlisted  person¬ 
nel.  The  Reserve  accounts  for  its  non-prior-service  costs  somewhat  dif¬ 
ferently  than  the  Guard,  preventing  a  clear  “apples-to-apples" 
comparison.  Nevertheless,  the  magnitude  of  expenditures  in  both  com¬ 
ponents  is  significant  and  invites  close  attention. 

Over  time,  concurrent  AC  and  RC  demands  for  training  time  and 
dollars  may  cause  an  unsustainable  condition  to  arise  in  the  active  as¬ 
sociate  fighter  units  if  RC  experience  levels  drop  below  70-75  per¬ 
cent.43  More  important  than  these  percentages  is  that  the  components 
work  together  to  establish  these  experience  thresholds  and  tipping 
points  to  draw  a  line  beyond  which  the  health  of  the  total  force  finds 
itself  at  risk.  Maintaining  higher  RC  experience  levels  is  integral  to  get¬ 
ting  the  most  out  of  the  associate  unit  construct  in  terms  of  combat 
power  and  the  development  of  less-skilled  personnel.  This  means  that 
decision  makers  must  put  into  place  policies  and  resources  that  will  ar¬ 
rest  the  decline  in  RC  experience  levels.  These  decisions  should  con¬ 
centrate  on  increasing  prior-service  accessions  from  the  AC  and  other 
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services.  Doing  so  will  also  save  money  and  preserve  combat  capabil¬ 
ity  in  the  long  run. 


Vision  of  the  Symbiotic  Relationship 

As  a  means  of  realizing  the  symbiotic  relationship’s  vision,  members 
of  the  AC  and  RC  are  working  together  to  leverage  this  concept  to  gain 
specific  insights  that  will  support  law,  policy,  and  decision  making. 
This  involves  finding  ways  to  monitor,  measure,  and  analyze  that  rela¬ 
tionship.  Figure  2  details  a  systems  dynamics  approach  which  approxi¬ 
mates  AC  and  RC  interdependencies,  illustrating  important  metrics  for 
system  performance  and  health.  Finally,  it  envisions  linking  these 
metrics  to  the  chairman  of  the  Joint  Chiefs  of  Staffs  risk  matrix  for 
force  management  and  operational  risk.44 
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Figure  2.  Vision  of  the  AC/RC  symbiotic  relationship 
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Linking  the  analysis  to  the  matrix  delivers  comparable  information 
on  many  different  issues  vital  to  support  sound  decision  making.  It  not 
only  provides  a  scalable,  standardized,  and  analytically  rigorous  frame¬ 
work  for  Headquarters  Air  Force  and  the  Joint  Staff  to  discuss  risk  but 
also  measures  key  resource,  schedule,  and  other  performance  goals.45 
Moreover,  the  matrix  incorporates  qualitative  factors  such  as  leader¬ 
ship,  total  force  education,  the  triad  (Air  Force  career,  family,  and  civil¬ 
ian  career),  community  connections,  and  civilian  skills— all  of  which 
play  a  critical  role  in  determining  long-term  sustainability  of  the  total 
force.46  Creating  risk  metrics  based  upon  the  indicators  of  sustainabil¬ 
ity  and  linking  them  to  the  chairman's  risk-management  matrix  on 
force  management  and  operations  (figs.  2  and  3)  give  leaders  a  way  to 
monitor,  measure,  analyze,  and  communicate  the  system  health  of  the 
Air  Force  to  the  chairman.  This,  in  turn,  offers  civilian  and  military  de¬ 
cision  makers  a  solid  foundation  for  gauging  future  effects  of  law,  pol¬ 
icy,  and  resources  on  various  force-management  courses  of  action. 
Linking  the  indicators  to  the  chairman's  risk  assessment  helps  identify 
information  that  leadership  needs  to  know  (well-defined  and  defensi¬ 
ble  assessment).  It  also  provides  civilian  and  military  leaders  with  suc¬ 
cess  and  failure  points  based  on  defined  thresholds  that  produce  con¬ 
cise,  consistent  interpretation  of  results.  Furthermore,  metric  end 
points  and  assessments  developed  via  data  analysis  and  evaluations  of 
subject-matter  experts  will  enable  senior  leaders  to  defend  the  deci¬ 
sions  they  make  with  the  assistance  of  this  process.47 
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Figure  3.  Chairman  of  the  Joint  Chiefs  of  Staff's  risk  matrix 
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To  put  the  symbiotic  relationship  into  action,  we  are  analyzing  inter¬ 
dependencies  between  the  AC  and  RC  by  using  a  systems  dynamics 
approach.  This  entails  gathering  information  from  all  three  compo¬ 
nents,  including  accession  and  attrition  data,  funds  spent  on  training, 
demand  for  training  slots,  and  experience  levels.  Lastly,  we  are  creating 
metrics  consistent  with  and  linked  to  the  chairman's  risk-assessment 
process,  an  activity  that  requires  developing  a  dashboard  to  display 
trends  from  the  six  key  sustainability  indicators  and  associated  (short¬ 
term,  midterm,  and  long-term)  risk. 


Conclusion 

This  effort  seeks  to  equip  Air  Force  senior  leaders  with  a  means  to 
elevate  the  component-cost  debate  to  a  dialogue  on  system  health, 
which  will  allow  efficient  and  effective  management  of  the  total  force, 
now  that  military  personnel  have  withdrawn  from  Iraq  and  during  the 
drawdown  from  Afghanistan.  It  enables  them  to  consider  current  and 
proposed  law,  policy,  and  resource  choices  affecting  personnel  from  a 
holistic  approach— one  that  maximizes  the  service's  combat  effective¬ 
ness  and  ensures  maximum  return  on  the  taxpayer's  investment.  The 
symbiotic  relationship  concept  offers  a  process  for  increasing  transpar¬ 
ency  and  inclusiveness  between  the  AC  and  RC— a  concept  that  will 
address  complaints  directed  against  the  Air  Force  during  deliberations 
over  the  president’s  budget  in  fiscal  year  2013  (FY  13).48  Members  of  all 
three  components  originated  the  concept  and  presented  it  at  the  high¬ 
est  levels  of  Air  Force  leadership.  The  chief  of  staff  of  the  Air  Force, 
chief  of  the  Air  Force  Reserve,  and  director  of  the  Air  National  Guard 
all  received  personal  briefings.  Additionally,  senior  Air  Force  leaders 
articulated  the  value  of  the  symbiotic  relationship  with  regard  to  the 
secretary  of  the  Air  Force's  3-1  effort  to  improve  the  continuum  of  ser¬ 
vice;  total  force  management;  rated  management;  hollow  force  initia¬ 
tive;  plans,  programs,  and  budgeting  process;  total  force  enterprise; 
and  identification  of  roles  and  missions  between  the  AC  and  RC.  Cur¬ 
rently,  all  three  components  are  working  in  an  open,  transparent  man- 
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ner  to  translate  the  concept,  using  a  systems  dynamics  approach  with 
the  intent  to  better  understand  the  interdependent  relationship  be¬ 
tween  the  AC  and  RC.  The  basic  analysis  of  these  interdependencies  is 
complete,  and  an  effort  to  produce  a  more  sophisticated  look  is  ongo¬ 
ing.  The  goal  involves  having  actionable  insights  ready  in  time  to  in¬ 
form  and  defend  the  FY  15  budget  along  with  the  array  of  law  and  pol¬ 
icy  decisions  needed  to  ensure  the  health  of  the  US  Air  Force  and  its 
ability  to  meet  the  demands  placed  upon  it  to  defend  the  nation.  O 


Notes 

1.  According  to  United  States  Code,  title  10,  the  Air  Force  consists  of  the  regular  Air  Force, 
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A  Case  for  a  Cyberspace 
Combatant  Command 

Blending  Service  and  Combatant  Command 
Responsibilities  and  Authorities 

Lt  Col  Shawn  M.  Dawley,  ANG 


he  next  draft  of  the  Unified  Command  Plan  should  redesignate 


US  Cyber  Command  as  a  functional  combatant  command 


(COCOM).  In  much  the  way  that  significant  contingents  of 
leadership  in  the  US  Army  wished  to  relegate  the  Army  Air  Corps  to  a 
mere  supporter  of  land  warfare  operations,  today's  military  routinely 
exercises  cyberspace  capabilities  in  supporting  roles  that  enable  opera¬ 
tions  in  other  domains.  Placing  US  Cyber  Command  (USCYBERCOM) 
on  the  same  level  as  other  geographic  and  functional  COCOMs  and 
granting  it  authority  to  organize,  train,  and  equip  its  subordinate  forces 
will  allow  it  to  more  readily  build,  harness,  and  exploit  capabilities 
within  this  newest  held  of  warfare. 

Although  man-made,  cyberspace  remains  a  domain  in  which  partici¬ 
pants  can  act  and  react,  thus  resembling  the  air,  space,  maritime,  and 
land  domains.  As  in  preceding  conflicts,  back  to  antiquity,  any  tribe, 
criminal  element,  or  nation-state  that  fails  adequately  to  weaponize  its 
abilities  in  the  available  war-fighting  domains  may  find  itself  unable  to 
wage  combat  successfully  across  the  spectrum  of  warfare.  Because  of 
the  principally  nonkinetic  nature  of  cyberspace,  institutional  and  doc¬ 
trinal  battles  over  the  organization  and  employment  of  US  cyber's  ca¬ 
pabilities  have  tended  to  focus  on  its  enabling  characteristics  rather 
than  its  offensive  capacity.  The  Department  of  Defense's  (DOD)  orga¬ 
nizational,  procurement,  and  deployment  policies  place  airpower  in 
the  air  domain,  sea  power  in  the  maritime  domain,  and  land  power  in 
the  land  domain.  As  articulated  by  Gen  Peter  Pace,  USMC,  retired, 
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former  chairman  of  the  Joint  Chiefs  of  Staff,  “the  integration  of  offen¬ 
sive  and  defensive  cyberspace  operations,  coupled  with  the  skill  and 
knowledge  of  our  people,  is  fundamental”  to  ensuring  strategic  superi¬ 
ority  in  the  cyber  domain.1 

Whereas  the  other  war-fighting  domains  existed  long  before  people's 
ability  to  operate  within  them,  an  inexorable  link  exists  between  the 
cyber  domain  and  the  capabilities  within  it— just  as  the  tools  and  doc¬ 
trine  evolve,  so  does  the  medium.  This  evolutionary  component  likely 
will  cause  cyber  to  become  the  most  unpredictable  area  within  the  full 
spectrum  of  conflict.  Embracing  this  reality  possibly  requires  an  ap¬ 
proach  and  organizational  structure  that  not  only  accepts  but  also  en¬ 
courages  nonconformity  and  less-than-conventional  warriors. 

Large-scale  kinetic  warfare  typically  rewards  forces  that  are  stead¬ 
fastly  disciplined  and  grounded  in  sound  doctrine  (given  the  number 
of  combatants  involved  and  the  close  coordination  necessary  for  exe¬ 
cution).  A  much  smaller  force,  however,  can  prosecute  cyber  warfare, 
rewarding  speed  and  agility  in  the  cyber  domain  on  a  magnitude 
greater  than  in  traditional  battlespaces.  Thus,  if  these  assumptions  are 
valid,  a  cyber  enterprise  may  call  for  operators  less  inclined  to  stand 
firm  in  established  doctrine  and  for  an  entity  to  organize  and  employ 
them  unlike  traditional  service  or  COCOM  constructs.  The  current  or¬ 
ganizational  model  within  the  Unified  Command  Plan  places  the  newly 
formed  joint  USCYBERCOM  as  a  subunihed  command  under  US  Stra¬ 
tegic  Command.  The  military  needs  a  construct  that  blends  service 
and  war-fighting  authorities  into  a  single  body  and  elevates  that  organi¬ 
zation  to  a  level  where  it  can  fully  exploit  cyberspace.  Toward  that  end, 
it  should  make  USCYBERCOM  a  full,  functional  COCOM  and  grant  the 
command  budgetary  authorities  under  title  10,  United  States  Code,  to 
organize,  train,  and  equip  its  unique  contingent  of  warriors. 
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Strategy  and  Execution 

Although  long-standing  customs,  international  norms,  and  armed 
conflicts  have  established  nearly  universal  recognition  of  physical  sov¬ 
ereignty,  the  nation-state  notion  of  physical  dominion  is  less  exacting 
in  discussions  of  the  cyber  domain.  Since  the  Peace  of  Westphalia  in 
the  mid-seventeenth  century,  sovereignty  has  been  viewed  as  a  legiti¬ 
mate  authority  over  territorial  possessions.2  Thus,  for  over  300  years, 
governments,  whether  monarchies  or  republics,  could  physically  delin¬ 
eate  encroachments  on  their  territories  by  land,  sea,  and— eventually— 
air  forces.  Further,  physical  destruction  of  a  fortress  or  financial  institu¬ 
tion  inarguably  constituted  an  act  of  war.  In  the  cyber  domain, 
nonkinetic  actions  produce  the  same  effects,  leaving  the  aggrieved 
without  the  same  sense  of  hostile  activity.  But  a  computer  network  at¬ 
tack  rendering  a  fire-brigade  command  post  unable  to  fix  targets  or  a  vi¬ 
rus  “zeroing  out”  a  banking  system's  accounts  is  not  completely  unlike 
munitions  leveling  either  one.  The  principal  distinction  is  that  a  kinetic 
attack  provides  for  a  tangible  “CNN  effect”  while  one  that  simply  uses 
binary  code  lacks  the  appeal  to  passion  so  critical  to  calls  for  retaliation. 

Because  attacks  or  probes  can  (and  do)  happen  within  the  cyber 
domain— but  not  in  the  same  way  they  occur  in  the  other  domains— 
nation-states  must  update  the  doctrinal  tradition  of  just  war  theory. 
Particularly  as  it  relates  to  jus  ad  helium,  “which  concerns  the  justice  of 
resorting  to  war  in  the  first  place,”  many  international  affairs  scholars 
hold  that  only  in  the  aftermath  of  a  threat,  existential  or  otherwise, 
should  a  nation-state  resort  to  conflict.3  To  date,  such  threats  have  typi¬ 
cally  been  directed  against  physical  possessions.  The  presence  of  ev¬ 
ery  computer,  cellular  telephone  tower,  and  communications  grid  on 
the  front  line  in  any  cyber  war  prevents  defense  in  depth.4  Principally, 
since  cyber's  vulnerabilities  include  its  reliance  on  nonproprietary, 
civilian-operated,  and  interconnected  network  systems,  “we  have  no 
early  warning  radar  system  or  Coast  Guard  to  patrol  the  borders  in  cy¬ 
berspace.”5  Therefore,  consistent  with  the  Bush  doctrine,  which  sees 
preemptive  warfare  as  the  necessary  counter  to  asymmetric  threats 
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posed  by  hostile  actors  leveraging  weapons  of  mass  destruction,  a  suc¬ 
cessful  approach  to  cyber  melds  defensive  posturing  with  offensive, 
preemptive  capabilities. 


Cyber  Operations  and  Strategic  Guidance 

Most  of  the  attention  given  to  cyber  and  cyber  warfare  in  strategic 
planning  guidance  addresses  threats  posed  to  the  United  States  and  its 
allies  rather  than  the  necessity  of  weaponizing  friendly  cyber  capacity. 
In  the  most  recent  National  Security  Strategy,  National  Defense  Strategy, 
and  National  Military  Strategy  of  the  United  States  of  America,  senior  gov¬ 
ernment  and  military  leaders  strongly  emphasize  the  dangers  posed  by 
state  and  nonstate  actors  capable  of  conducting  cyber  attacks  against 
the  United  States  and  its  allies.  They  pay  less  attention  to  developing  a 
robust  “strike”  capability.  Naturally,  since  these  publications  are  avail¬ 
able  to  both  a  domestic  and  international  audience,  one  would  not  ex¬ 
pect  them  to  contain  any  specifics  regarding  offensive  capabilities.  At 
the  same  time,  the  degree  to  which  these  documents  explore  our  na¬ 
tion's  vulnerabilities  in  the  cyber  domain  far  exceeds  the  attention 
paid  to  generating  combat  power. 

In  the  National  Security  Strategy  (2010),  President  Barack  Obama  ac¬ 
knowledges  the  importance  of  cybersecurity,  listing  it  as  one  of  just 
six  strategic  imperatives  for  safeguarding  US  national  interests:  “In  ad¬ 
dition  to  facing  enemies  on  traditional  battlefields,  the  United  States 
must  now  be  prepared  for  asymmetric  threats,  such  as  those  that  tar¬ 
get  our  reliance  on  space  and  cyberspace.”6  This  and  other  excerpts 
prepared  by  his  national  security  staff  and  presented  in  that  docu¬ 
ment  deal  for  the  most  part  with  US  vulnerabilities.  The  strategy  ac¬ 
curately  captures  and  portrays  the  nature  of  future  cyber  threats  as 
existing  across  the  continuum  of  potential  adversaries.  However,  it 
presents  the  facilitating  role  of  cyber  exclusive  of  its  offensive  ability: 
“The  threats  we  face  range  from  individual  criminal  hackers  to  .  .  . 
terrorist  networks  to  advanced  nation  states.  .  .  .  Our  digital  infra¬ 
structure,  therefore,  is  a  strategic  national  asset.  .  .  .  We  will  deter, 
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prevent,  detect,  defend  against,  and  quickly  recover  from  cyber  intru¬ 
sions  and  attacks.”7 

Like  the  National  Security  Strategy,  the  National  Defense  Strategy 
(2008)  acknowledges  that  the  susceptibility  of  cyberspace  to  malicious 
operations  is  a  strategic  vulnerability.  Further,  it  also  lacks  strong  and 
significant  guidance  in  the  way  of  furthering  offensive  engineering  of 
cyber  capabilities:  “The  United  States  .  .  .  and  our  partners  face  a  spec¬ 
trum  of  challenges,  including  .  .  .  emerging  space  and  cyber  threats” 
(emphasis  added).8  Cyber  dangers  are  rightly  grouped  with  the  array 
of  potential  nonconventional  threats,  but  the  National  Defense  Strategy 
presents  them  solely  as  a  challenge— not  as  an  opportunity  for  exploita¬ 
tion.  Further,  the  strategy  has  a  tendency  to  think  even  more  narrowly 
than  the  president's  strategic  guidance  in  that  it  more  readily  associ¬ 
ates  cyber  threats  with  asymmetric  warfare  against  the  United  States 
by  a  weaker  adversary:  “Small  groups  or  individuals  .  .  .  can  attack  vul¬ 
nerable  points  in  cyberspace  .  .  .  causing  economic  damage,  compro¬ 
mising  sensitive  information  and  materials,  and  interrupting  critical 
services  such  as  power  and  information  networks.”9 

Finally,  the  National  Military  Strategy  of  the  United  States  of  America 
(2011)  contemplates  cyberspace  not  simply  as  a  prospective  “Achilles' 
heel”  but  as  a  domain  in  which  the  United  States  can  and  should  pros¬ 
ecute  operations.  It  readily  accepts  the  impending  challenges  to  the  en¬ 
abling  capability  of  cyber  when  it  stipulates  that  “assured  access  to  and 
freedom  of  maneuver  within  the  global  commons— shared  areas  of  sea, 
air,  and  space— and  globally  connected  domains  such  as  cyberspace 
are  being  increasingly  challenged  by  both  state  and  non-state  actors.”10 
However,  the  strategy  departs  from  its  parent  documents  issued  by  the 
president  and  secretary  of  defense  when  it  establishes  that  “enabling 
and  war-fighting  domains  of  space  and  cyberspace  are  simultaneously 
more  critical  for  our  operations,  yet  more  vulnerable  to  malicious  ac¬ 
tions”  (emphasis  added).11  Here,  a  reader  of  senior  strategic  policy 
guidance  gets  a  first  mention  of  cyberspace  as  an  arena  in  which  war¬ 
fare,  albeit  principally  nonkinetic,  takes  place.  This  dual-purpose  con- 
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text  is  comparable  to  that  of  any  other  domain.  For  example,  in  the  air 
domain,  one  can  perform  aerial  resupply  of  forward  operating  bases 
(an  enabling  function)  or  bombing  strikes  of  armored  columns  (a  war¬ 
fighting  function).  More  to  the  point,  the  National  Military  Strategy  de¬ 
clares  that  “space  and  cyberspace  enable  effective  global  war-fighting 
in  the  air,  land,  and  maritime  domains,  and  have  emerged  as  war-fighting 
domains  in  their  own  right"  (emphasis  added).12 

Further  downstream  from  the  chairman  of  the  Joint  Chiefs  of  Staffs 
strategy  document,  the  outlook  in  the  Joint  Operating  Environment 
makes  comparable  assessments  about  the  unfolding  dynamics  of  cy¬ 
berspace.  It  addresses  threats  within  cyber,  such  as  its  becoming  a 
“main  front  in  both  irregular  and  traditional  conflicts,"  as  well  as  the 
range  of  adversaries  from  “states  and  non-states  .  .  .  from  the  unsophis¬ 
ticated  amateur  to  highly  trained  professional  hackers.”13  One  finds  a 
more  direct  call  to  action,  however,  in  the  Universal  Joint  Task  List  (un¬ 
der  “Manage  Cyberspace  Operations”),  which  charges  “services  and 
agencies  [to]  ensure  offensive  and  defensive  capabilities  are  fielded  and 
ready  to  further  DOD  and  United  States  .  .  .  national  security  objec¬ 
tives  in  cyberspace”  (emphasis  added).14  Although  lacking  the  Joint 
Task  List's  demand  for  offensive  capability  within  cyberspace,  the  Joint 
Operating  Environment  does  issue  a  challenge— as  does  the  National 
Military  Strategy— to  rethink  the  organizational  and  doctrinal  construct 
of  the  DOD's  cyber  enterprises. 

In  the  Joint  Operating  Environment,  one  reads  that  “while  progress  to¬ 
ward  defining  requirements  and  advocating  for  Service  cyberspace 
forces  has  been  made,  cyber  threats  will  demand  a  new  mindset  to  en¬ 
sure  agility  in  adapting  to  new  challenges.”15  Similarly,  but  with  more 
emphasis  on  the  organizational  issues  ahead,  the  National  Military 
Strategy  posits  that  “we  will  carefully  review  legacy  personnel  systems. 

.  .  .  The  emerging  war-fighting  domain  of  cyberspace  requires  special 
attention  in  this  regard.”16  Within  the  parameters  of  these  strategic  vec¬ 
tors  of  “new  mindset,”  “agility,”  and  manpower,  there  is  latitude  to  ap¬ 
proach  cyber  capabilities,  roles,  and  missions  not  as  extrapolations  of 
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existing  organizations  and  doctrines  but  as  unique  problems  worthy  of 
innovative  solutions. 

At  the  COCOM  and  service  levels,  bottom-up  approaches  to  cyber 
warfare  have  been  divided  more  appropriately  between  maintaining 
access  to  the  enabling  functions  of  cyber  (defense)  and  the  ability  to 
exploit  and  attack  adversary  networks  (offense): 

USCYBERCOM  is  responsible  for  planning,  coordinating,  integrating,  syn¬ 
chronizing,  and  directing  activities  to  operate  and  defend  the  Depart¬ 
ment  of  Defense  information  networks  and  when  directed,  conducts  full- 
spectrum  military  cyberspace  operations  ...  in  order  to  ensure  U.S.  and 
allied  freedom  of  action  in  cyberspace,  while  denying  the  same  to  our  ad¬ 
versaries.17  (emphasis  added) 

The  phrase  "denying  the  same”  conveys  a  deliberate  and  active  appli¬ 
cation  of  cyber  capability  against  an  enemy  to  create  effects  in  a  man¬ 
ner  consistent  with  effects-based  operations,  which  are  "planned,  ex¬ 
ecuted,  assessed,  and  adapted  to  influence  or  change  systems  or 
capabilities  in  order  to  achieve  desired  outcomes.”18  Linking  actions  to 
objectives,  one  can  generate  effects  either  kinetically  or  nonkineti- 
cally.  The  utilization  of  cyber  capabilities  to  affect  nodes  within  a  sys¬ 
tem— especially  within  a  system-of-systems— can  create  effects  whose 
outcomes  far  exceed  the  inputs.  Especially  because  warfare  is  complex 
and  nonlinear,  a  small  cyber  action  against  a  nodal  construct  can  pro¬ 
duce  disruptive  consequences. 


A  Combatant  Command  Model 

According  to  Joint  Publication  1 ,  Doctrine  for  the  Armed  Forces  of  the 
United  States,  functional  COCOMs  are  "responsible  for  a  large  func¬ 
tional  area  requiring  single  responsibility  for  effective  coordination  of 
the  operations  therein.  These  responsibilities  are  normally  global  in 
nature.”19  Beyond  this  operational  orientation,  US  Special  Operations 
Command  (USSOCOM)  also  merges  service-like  authorities  and  respon¬ 
sibilities  with  those  typically  associated  with  other  functional  CO¬ 
COMs.  Like  a  hybrid  of  a  service  and  a  COCOM  (e.g.,  the  US  Navy  and 
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US  Central  Command),  USSOCOM  prepares  forces  for  fielding  and 
then  plays  a  role  when  they  go  into  battle. 

Following  the  passage  of  the  Defense  Reorganization  Act  of  1986,  US¬ 
SOCOM  was  established  as  a  four-star  unified  command  "responsible 
for  preparing  Special  Operations  Forces  to  carry  out  assigned  missions 
and,  if  directed  by  the  President  or  Secretary  of  Defense,  to  plan  and 
conduct  special  operations.”20  The  first  charge,  "preparing  Special  Op¬ 
erations  Forces,”  is  comparable  to  that  of  any  service;  the  second,  "to 
plan  and  conduct  special  operations,”  falls  within  the  realm  normally 
associated  with  a  COCOM. 

The  Unified  Command  Plan  of  2004  "assigned  USSOCOM  responsibil¬ 
ity  for  synchronizing  Department  of  Defense  plans  against  global  ter¬ 
rorist  networks  and,  as  directed,  conducting  global  operations  [against 
those  networks].”21  To  do  so,  the  command  "receives,  reviews,  coordi¬ 
nates  and  prioritizes  all  DoD  plans  .  .  .  and  then  makes  recommenda¬ 
tions  to  the  Joint  Staff  regarding  force  and  resource  allocations  to  meet 
global  requirements.”22 

If  USSOCOM  performs  both  service-like  duties  to  build  a  force  and 
COCOM-like  authorities  to  employ  it,  then  the  command  provides  for 
an  organization  that 

1.  develops  strategy  and  doctrine  to  address  unique  challenges; 

2.  has  budgetary  authority  to  recruit,  organize,  train,  and  equip  select 
personnel; 

3.  can  provide  resources  to  COCOMs  in  a  supporting  role;  and 

4.  can  conduct  operations  worldwide  in  a  supported  role. 

This  blending  of  service-style  title  10  responsibilities  with  COCOM-style 
authorities  allows  for  an  organization  with  a  worldwide  mandate  that 
can  marry  the  right  personnel  to  its  mission;  develop  nimble  tactics, 
techniques,  and  procedures;  and  wage  war  against  the  enemy  along  the 
spectrum  of  conflict.  USCYBERCOM  should  adopt  this  model. 
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Recommendations 

A  functional  COCOM  that  recruits,  organizes,  trains,  equips,  and  em¬ 
ploys  cyber  capabilities  as  weapons  in  warfare’s  newest  domain  is  es¬ 
sential  to  contemporary  conflict.  Just  as  Air  Force  Special  Operations 
Command,  Marine  Special  Operations  Command,  Army  Special  Op¬ 
erations  Command,  and  Navy  Special  Warfare  Command  are  compo¬ 
nent  commands  of  USSOCOM,  so  would  Army  Forces  Cyber  Com¬ 
mand,  TWenty-Fourth  Air  Force,  Fleet  Cyber  Command,  and  Marine 
Forces  Cyber  Command  retain  their  affiliations  as  service  components 
of  USCYBERCOM.23  Like  the  components  currently  comprising  USSO¬ 
COM,  the  components  of  the  elevated  USCYBERCOM  should  include 
personnel  uniquely  and  thoroughly  suited  to  its  core  mission. 

Existing  manpower  models  demonstrate  the  effectiveness  of  a  long 
"tooth-to-tail”  ratio  for  certain  force  constructs.  Of  the  nearly  60,000 
members  of  USSOCOM,  only  about  20,000  of  them  are  "operators”— in¬ 
dividuals  recruited,  trained,  and  retained  as  special  forces.24  Looking  at 
another  community  for  context,  that  of  remotely  piloted  aircraft,  one 
sees  that  the  number  of  pilots  and  sensor  operators  represents  but  a 
fraction  of  the  overall  required  manpower.  This  model  reinforces  the 
concept  of  a  centrally  controlled  cyber  operations  center,  given  that 
mission  operators  of  these  aircraft  can  perform  global  functions  from  a 
geographically  separated  garrison  installation. 

The  ratio  of  support  personnel  to  cyber  operators  needs  further  re¬ 
search,  but,  more  than  likely,  the  operators  would  receive  support 
from  a  larger  number  of  administrative  and  technical  specialists.  Simi¬ 
lar  to  the  US  Army’s  "SOF  [special  operations  forces]  Truths”  that  "qual¬ 
ity  is  better  than  quantity”  and  that  “humans  are  more  important  than 
hardware,”  not  every  "cyber  soldier”  need  be  a  hunter-killer.25  Rather, 
the  majority  of  USCYBERCOM  would  include  the  various  administra¬ 
tive  and  logistics  support  personnel  that  make  up  any  other  command, 
with  emphasis  on  deliberately  recruiting,  training,  equipping,  and  re¬ 
taining  those  select  men  and  women  best  suited  to  the  dual  missions 
of  cyber  defense  and  cyber  attack. 
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Following,  or  in  conjunction  with,  a  revision  of  the  Unified  Command 
Plan,  legislative  action  would  provide  budgetary  authority  to  US- 
CYBERCOM— like  that  of  the  services  and  USSOCOM— and  would 
specify  roles  and  missions,  necessitating  a  change  to  title  10  United 
States  Code  (Armed  Forces),  part  1  (Organization  and  General  Military 
Powers),  chapter  6  (Combatant  Commands).  Aside  from  devising  regu¬ 
lations  to  incorporate  the  above-mentioned  statutory  change  in  the  sta¬ 
tus  of  USCYBERCOM,  the  DOD  would  need  to  revise  its  planning,  pro¬ 
gramming,  budgeting,  and  execution  process.26  Like  Major  Force 
Program  11,  Special  Operations  (MFP-11)  in  the  Future  Years  Defense 
Program,  the  DOD  should  establish  a  dedicated  major  force  program 
(e.g.,  "MFP-12  Cyber  Operations”),  along  with  a  budgetary  entry  for 
USCYBERCOM  (similar  to  what  USSOCOM,  the  services,  and  DOD 
agencies  currently  have).27 

Finally,  to  wage  cyber  warfare,  a  standing  joint  cyber  task  force 
(JCTF)  should  be  established  within  USCYBERCOM.  Acting  as  both  a 
fusion  cell  for  worldwide  monitoring  of  cyber  threats  and  a  command 
authority  through  which  the  secretary  of  defense,  in  communication 
with  the  Joint  Chiefs  of  Staff,  can  direct  USCYBERCOM  to  conduct  its 
COCOM  mission,  this  JCTF  would  plan  for  and  direct  offensive  and 
counterattack  operations  within  cyberspace  against  the  spectrum  of 
adversaries  threatening  US  national  interests,  cyber  or  otherwise. 


Conclusion 

A  USCYBERCOM  empowered  to  organize,  train,  and  equip  its  forces 
and  employ  them  against  adversaries  can  more  fully  build  and  exploit 
capabilities  within  warfare's  newest  domain.  So  long  as  a  cyber  force 
remains  subordinated  to  potential  service  or  traditional  war-fighting 
parochialism,  it  will  be  hindered  in  weaponeering  its  capacity  to  inflict 
effects  in  the  battlespace.  By  providing  its  leaders  more  freedom  of 
movement  within  the  DOD  bureaucracy,  USCYBERCOM  will  allow 
them  to  develop  and  maintain  combat  power  in  a  way  that  is  less  ham¬ 
pered  by  the  conventional  focuses  of  their  respective  branches— just  as 
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airpower  underwent  reexamination  as  a  capability  that  transcended  its 
supporting  effects  to  the  Army's  battlefield  doctrine.  Once  its  forces 
are  fully  developed  and  available,  a  USCYBERCOM  with  functional 
COCOM  authority  to  conduct  operations  against  nodal  systems  is  posi¬ 
tioned  to  create  disproportional  and  potentially  catastrophic  effects. 
These  effects— some  of  which  can  be  “undone,”  given  their  often  non- 
kinetic  nature— can  be  produced  through  surgical  application  by  a 
standing  JCTF.  © 
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Lt  Col  Shawn  M.  Dawley,  ANG 

Lieutenant  Colonel  Dawley  (BS,  MBA,  Embry-Riddle  Aeronautical  University; 
MA,  Marine  Corps  University;  MA,  American  Military  University)  is  com¬ 
mander  of  the  165th  Airlift  Squadron,  Kentucky  Air  National  Guard.  A  C-130 
pilot  who  has  flown  combat  and  combat-support  sorties  in  support  of  Op¬ 
eration  Enduring  Freedom,  Operation  Iraqi  Freedom,  Operation  Joint  Forge 
and  Joint  Guard,  and  Operation  Southern  Watch,  he  most  recently  served  as 
commander  of  the  737th  Expeditionary  Airlift  Squadron  in  Southwest  Asia. 
Lieutenant  Colonel  Dawley  has  completed  Squadron  Officer  School,  Air 
Command  and  Staff  College,  Marine  Corps  Command  and  Staff  College,  Air 
War  College,  and  the  Joint  Force  Staff  College's  advanced  joint  professional 
military  education. 
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A  New  Chief  of  Staff,  a  Golden 
Opportunity 

Building  the  Right  Force  over  the  Next  Decade 

Maj  Timothy  B.  Murphy,  USAF 

With  budget  cuts  beginning  to  take  effect  and  sequestration 
looming,  yesterday's  carefully  laid  plans  are  quickly  fading 
into  oblivion.  During  constrained  times,  it  is  easy  to  reject 
ideas  as  unattainable,  but  we  must  remember  to  keep  events  in  con¬ 
text.  Even  a  brief  glimpse  into  our  service's  history  reveals  that  bscal 
and  political  issues  should  not  derail  foundational  concepts.  Consider 
the  state  of  the  United  States  Air  Service  in  the  months  directly  follow¬ 
ing  the  end  of  World  War  I.  After  the  Air  Service  played  a  major  role  in 
Germany's  defeat  and  unequivocally  demonstrated  the  potential  of  air- 
power,  its  leaders  endured  a  drawdown  which  turned  that  fledgling  or¬ 
ganization  into  a  hollow  shell.  The  service  contracted  from  185  aero 
squadrons  and  197,338  total  personnel  to  22  squadrons  and  9,596  per¬ 
sonnel-decreases  of  88  and  95  percent,  respectively!1  Yet,  even  in  the 
midst  of  draconian  cuts  and  an  inhospitable  political  environment,  the 
Air  Service  incrementally  laid  the  groundwork  for  a  phenomenally 
successful  Air  Corps  and  independent  Air  Force. 

Today,  Gen  Mark  A.  Welsh  III,  the  new  chief  of  staff  of  the  Air  Force, 
faces  a  similar  situation,  though  far  less  extreme  than  the  one  that  con¬ 
fronted  Air  Service  leaders  after  World  War  I.  Budget  cuts  and  political 
obstacles  threaten  the  Air  Force’s  recent  progress  toward  balancing  its 
capabilities  in  both  conventional  and  irregular  warfare  (IW).  Procure¬ 
ment  of  fifth-generation  aircraft  is  essential  for  the  Air  Force,  but  this 
should  not  deter  the  new  chief  from  building  the  right  force  over  the 
next  decade.  One  of  the  major  issues  for  the  service  involves  develop¬ 
ing  a  balanced  force  capable  of  efficiently  responding  to  threats  across 
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the  spectrum  of  warfare.  The  Air  Force  adapted  very  well  to  the  con¬ 
flicts  of  the  last  decade,  but  it  still  lacks  an  appropriately  proportioned 
and  agile  force  structure  and  organization.  Historically,  the  Air  Force 
has  planned,  prepared,  and  equipped  its  force  to  deal  with  conven¬ 
tional  threats  and  adapted  as  necessary  in  irregular  conflicts.  In  2008 
Secretary  of  Defense  Robert  Gates  famously  admonished  military  lead¬ 
ers  for  failing  to  deploy  needed  assets  to  the  theatre:  "Because  people 
were  stuck  in  old  ways  of  doing  business,  it's  been  like  pulling  teeth.”2 
Rather  than  constantly  adapting  and  enduring  scathing  comments 
from  defense  secretaries,  the  Air  Force  should  begin  now  to  lay  the 
foundation  for  a  balanced  force  capable  of  both  fighting  our  nation's 
high-intensity  wars  and  countering  IW's  threats  to  the  legitimacy  of 
friendly  nations. 

This  article  demonstrates  how  to  build  the  right  force  even  in  an  un¬ 
certain  fiscal  and  political  environment.  It  briefly  discusses  the  De¬ 
partment  of  Defense's  (DOD)  current  strategic  guidance  and  the  Air 
Force's  plans  to  implement  it  with  regard  to  IW;  identifies  the  gaps  be¬ 
tween  that  guidance  and  Air  Force  implementation;  and  then  suggests 
a  series  of  incremental  steps  that  the  service  should  take  to  fill  the 
gaps,  developing  the  right  force  for  the  future  in  the  process.  The  key 
to  the  latter  entails  empowering  operational  wings  with  a  far  greater 
ability  to  fight  and  win  both  conventional  and  irregular  conflicts.  Con¬ 
tinuing  to  segregate  IW  missions  and  execution  in  disparate  units 
throughout  the  Air  Force  will  only  prolong  institutional  apathy  and  un¬ 
preparedness  for  IW. 


The  Current  Environment 

The  DOD’s  strategic  guidance  of  January  2012  articulates  new  priori¬ 
ties  for  sustaining  US  global  leadership  in  the  twenty-first  century.  Al¬ 
though  the  guidance  directs  a  rebalance  toward  the  Asia-Pacific  region, 
it  also  warns  of  destabilizing  threats  and  violent  extremists  worldwide, 
particularly  in  the  Middle  East.3  Granted,  the  new  "pivot  to  Asia”  com¬ 
monly  evokes  thoughts  of  greater  roles  for  conventional  forces,  but  at 
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the  same  time,  it  involves  a  significant  need  for  irregular  forces.  If  the 
Asia-Pacific  region  truly  has  substantial  strategic  value,  then  the  United 
States  will  likely  become  engaged  in  countering  threats  to  the  legiti¬ 
macy  of  its  partner  nations  in  the  region.  The  strategic  guidance  antici¬ 
pates  this  involvement  by  initiating  an  expansion  of  the  United  States' 
partnership  with  aligned  nations  to  fulfill  national  priorities.4  Thus,  the 
shift  from  Iraq  and  Afghanistan  to  Asia  may  actually  increase  the  im¬ 
portance  of  countering  irregular  threats  over  the  next  decade. 

Before  the  new  strategic  guidance  came  down  from  the  DOD,  the 
Air  Force  had  worked  for  several  years  to  improve  its  ability  to  operate 
in  an  IW  environment.  Airmen  have  labored  tirelessly  over  the  last  de¬ 
cade  to  provide  world-class  close  air  and  intelligence,  surveillance,  and 
reconnaissance  (ISR)  support  to  ground  troops  as  well  as  use  global 
mobility  to  sustain  conflicts  in  multiple  theatres.  As  the  conflicts  pro¬ 
gressed,  the  Air  Force  experienced  unprecedented  advances  in  combat 
medical  care  and  made  available  thousands  of  individual  augmentees 
to  ground  commanders  and  joint  headquarters  across  the  globe.  Dur¬ 
ing  this  time,  Air  Force  Special  Operations  Command  expanded  its 
role,  offering  unequaled  support  to  special  operators  throughout  the 
joint  force.  The  service  also  improved  its  capacity  to  supply  air  advi¬ 
sors  who  help  shape  air  forces  in  partner  nations.  Finally,  the  Air 
Force  developed  detailed  plans  to  acquire  both  light  attack  and  light 
mobility  aircraft  that  would  further  its  efforts  in  building  partnership 
capacity  (BPC). 

In  light  of  the  publication  of  the  DOD's  strategic  guidance,  the  ser¬ 
vice  is  now  in  the  final  stages  of  preparing  an  operational  road  map  for 
IW  that  will  outline  its  contributions  to  the  department's  efforts  in 
both  BPC  and  IW.  The  document  refers  to  this  type  of  warfare  as  a 
struggle  for  legitimacy  and  influence  over  a  relevant  population  rather 
than  the  coercion  of  key  political  leaders  or  the  defeat  of  their  military 
forces.5  It  includes  several  goals,  such  as  creating  an  institutional  air- 
advisor  capability  in  the  general-purpose  force,  training  Airmen  to  be¬ 
come  equally  proficient  and  capable  in  conventional  warfare  and  IW, 
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equipping  them  for  countering  irregular  threats,  and  developing  the 
capacity  of  willing  partner  nations'  security  forces.6  TWo  objectives— 
fielding  small  teams  of  regionally  oriented,  expert  trainers  and  estab¬ 
lishing  regionally  aligned  IW-capable  forces— seek  to  attain  some  of  the 
goals  laid  out  in  the  road  map,  just  as  other  goals  and  corresponding 
objectives  are  designed  to  improve  the  Air  Force’s  capabilities  in  IW 
and  BPC. 


The  Gaps 

Sections  of  Headquarters  Air  Force  have  outlined  excellent  plans  to 
assist  these  two  efforts  in  the  DOD's  guidance,  but  without  correspond¬ 
ing  changes  in  the  service's  organization  and  structure,  the  road  map 
will  probably  fall  short  of  its  aims.  The  fact  that  the  bulk  of  the  Air 
Force's  general-purpose  force  consists  of  operational  fighter,  bomber, 
and  mobility  units  reflects  a  service  organized  primarily  to  fight  in 
conventional  conflicts.  However,  these  units— the  backbone  of  the  Air 
Force— will  have  little  involvement  in  air  advising  and  BPC  unless 
leadership  forces  a  shift  in  mind-set.  Fighter,  bomber,  and  mobility 
units  care  about  what  appears  on  their  designed  operational  capability 
(DOC)  statement— essentially  a  narrative  description  of  a  unit's  war¬ 
time  missions.  If  air  advising,  BPC,  and  other  IW  efforts  are  tasked 
only  to  specialized  units  in  the  general-purpose  force,  then  the  founda¬ 
tional  units  of  the  Air  Force  will  have  little  to  no  role  in  the  process.  In 
fact  the  service  has  historically  assembled  ad  hoc  units  for  IW  and 
then  disbanded  them  when  it  perceived  they  had  become  unneces¬ 
sary.7  Generating  an  institutional  air  advisor  capability  in  the  general- 
purpose  force  will  prove  difficult  if  it  does  not  include  units  that  carry 
out  the  Air  Force's  primary  missions. 

Another  major  area— the  Air  Force's  structure— will  likely  cause  IW 
and  BPC  efforts  to  fall  short.  Gen  Norton  Schwartz,  former  chief  of 
staff  of  the  Air  Force,  argued  in  2010  that  the  service  had  only  a  limited 
need  for  a  light  attack  platform  because  current  aircraft  could  service 
any  close  air  support  requirement.8  He  advocated  acquiring  15  light 
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attack  aircraft  for  BPC,  and  the  Air  Force  included  both  those  plat¬ 
forms  and  light  mobility  aircraft  in  its  budget  requests  for  fiscal  years 
2012  and  2013.  Unfortunately,  the  service  recently  cut  both  programs, 
and  the  future  of  both  aircraft  is  very  much  in  question.  Congress  also 
expressed  skepticism  about  these  programs,  but  its  concerns  had  to  do 
with  the  plan  to  use  the  aircraft  only  for  BPC  missions.9 

The  Air  Force  eliminated  the  light  aircraft  program  even  though  it 
has  no  dedicated  capability  within  the  general-purpose  force  to  con¬ 
duct  IW.  This  is  not  to  say  that  the  service  cannot  perform  in  an  IW  en¬ 
vironment-today’s  fighter,  bomber,  ISR,  and  mobility  units  effectively 
conducted  their  missions  during  the  last  decade.  However,  using  ad¬ 
vanced  weaponry  in  an  irregular  conflict  has  its  costs— and  they  are 
significant.  An  Air  Combat  Command  study  of  2008  concluded  that  re¬ 
placing  just  one-and-a-half  squadrons  of  deployed  fighters  with  light  at¬ 
tack  aircraft  would  save  well  over  $300  million  per  year  in  fuel  and  op¬ 
erations  costs.10  These  are  enormous  savings,  especially  considering 
the  fact  that  for  most  of  the  past  10  years,  the  Air  Force  had  more  than 
four  fighter  squadrons  deployed  in  Central  Command’s  theatre  at  the 
same  time.  These  expenses  do  not  even  include  degradation  of  the  ser¬ 
vice  life  of  fighters  and  bombers  caused  by  the  extremely  high  opera¬ 
tions  tempo  since  2001. 11 

Clearly,  the  Air  Force  could  benefit  from  a  change  in  mind-set,  al¬ 
lowing  it  to  alter  its  organization  and  structure  to  pursue  BPC  and  IW 
more  effectively.  But  we  must  ask  ourselves  whether  such  change  is  a 
worthy  task— and  if  so,  is  it  possible  in  the  midst  of  significant  budget 
cuts  and  political  uncertainty?  The  answer  to  both  questions  is  yes,  but 
such  action  will  demand  a  firm  commitment  from  Air  Force  leader¬ 
ship,  not  to  mention  a  specific  (and  cost-effective)  plan  for  cultivating 
the  right  force  over  the  next  decade. 
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The  Way  Ahead 

The  plan  to  balance  the  force  outlined  below  draws  on  two  major 
premises.  First,  air  and  space  superiority  will  and  should  always  be  the 
top  priority  of  the  Air  Force.  The  other  important  core  functions,  such 
as  global  attack,  rapid  global  mobility,  and  agile  combat  support,  all  de¬ 
pend  upon  that  superiority.  Buying  the  aircraft  and  support  infrastruc¬ 
ture  to  assure  superiority  is  an  expensive  but  a  necessary  priority  for 
the  Air  Force,  and  this  should  not  change.  Second,  the  service  could 
balance  the  force  by  taking  incremental  steps  over  the  next  several 
years.  At  present  it  has  very  little  dedicated  capability  to  conduct  IW 
and  expeditionary  BPC  within  the  general-purpose  force,  but  the  Air 
Force  does  not  need  to  acquire  these  capabilities  in  the  short  term.  The 
last  decade  proved  that  its  current  organization  and  structure  can  adapt 
to  irregular  conflict,  so  changes  can  safely  take  place  over  the  long 
term.  The  service  should  set  a  goal  of  developing  a  proportional  force 
over  several  years,  but  it  should  not  view  the  latter  in  terms  of  dollars 
but  in  terms  of  capability  and  efficiency.  Conventional  missions,  aircraft, 
and  equipment  will  always  involve  considerable  cost,  but  the  Air  Force 
needs  to  acquire  new  resources  and  personnel  that  will  balance  its  ca¬ 
pability  to  carry  out  both  irregular  and  conventional  warfare. 

To  produce  the  right  force,  the  service  should  implement  three  suc¬ 
cessive  stages:  (1)  make  its  operational  wings  responsible  for  IW  and 
BPC  missions,  (2)  resurrect  the  light  attack  aircraft  and  light  mobility 
aircraft  programs,  and  (3)  work  toward  supplying  most  of  its  opera¬ 
tional  wings  with  indigenous  personnel  and  light  aircraft  intended  for 
BPC  and  IW  missions.  The  Air  Force  can  do  so  by  spreading  the  costs 
of  implementation  over  several  years. 

Stage  One:  Shifting  Responsibility  to  Operational  Wings 

The  first  step  in  building  the  right  force  should  focus  on  improving  the 
IW  and  BPC  capabilities  of  operational  wings— more  a  shift  in  mind-set 
than  in  personnel  and  resources.  Currently,  operational  wing  com¬ 
manders  must  fill,  among  others,  individual  augmentee  or  joint  expe- 
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ditionary  taskings,  the  latter  directly  supporting  Army  units  and  the 
former  filling  non-service-specific  positions  on  the  joint  manning  doc¬ 
ument.  Wing  commanders  receive  these  deployment  taskings  and 
identify  members  within  their  unit  to  fill  each  assigned  position.  The 
wing  is  responsible  for  equipping  its  members,  but  most  predeploy¬ 
ment  training  occurs  elsewhere.  If  an  entire  unit  within  the  wing 
(such  as  a  fighter  squadron)  receives  deployment  orders,  most  of  its 
members  typically  prepare  together  and  then  deploy  together.  Unit  de¬ 
ployments  always  mirror  missions  designated  on  the  wing's  DOC 
statement.  Thus,  the  wing  spends  most  of  its  time  preparing  and  train¬ 
ing  personnel  for  deployments  that  will  support  potential  missions  on 
that  statement. 

To  fully  institutionalize  IW  and  BPC  missions  within  the  general- 
purpose  force,  the  Air  Force  should  include  these  various  missions  on 
the  DOC  statements  of  operational  wings.  As  indicated  above,  those 
wings  already  send  their  members  on  such  missions,  but  changing  the 
statement  will  formalize  the  process.  Instead  of  relying  almost  exclu¬ 
sively  on  outside  agencies  to  train  members  quickly,  prior  to  deploy¬ 
ment,  the  wing  should  have  a  cadre  of  personnel  trained,  equipped, 
and  prepared  for  IW  and  BPC  missions. 

Furthermore,  the  Air  Force  should  move  responsibility  to  opera¬ 
tional  wings  in  a  way  that  minimizes  costs.  Forming  a  cadre  of  wing- 
level  personnel  dedicated  full-time  to  these  two  missions  is  unrealistic 
and,  frankly,  unnecessary.  Instead  of  creating  new  units  or  organiza¬ 
tions,  the  service  should  model  its  IW/BPC  cadre  after  a  functional  or¬ 
ganization  like  Wing  Safety,  whereby  each  wing  could  have  an  IW  of¬ 
fice  that  would  develop  and  sustain  the  aforementioned  cadre.  Like 
Wing  Safety,  this  office  should  have  one  held  grade  officer  and  a  few 
dedicated  noncommissioned  officers  to  administer  and  oversee  the 
program.  Each  squadron  within  the  wing  should  have  two  or  three  IW 
personnel.  The  IW  cadre  would  consist  of  subject-matter  experts  who 
prepare  the  rest  of  the  squadron  for  IW  missions.  Like  a  squadron's 
safety  tasks,  its  IW  tasks  should  be  additional  duties,  and  IW  personnel 
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should  still  perform  the  unit’s  primary  mission.  Ideally,  the  Air  Force 
would  track  IW  personnel  through  career-held  designation  prefixes 
and  offer  incentives  such  as  ribbons  or  badges.12 

After  the  experience  of  the  last  10  years,  constructing  an  IW  program 
at  the  wing  level  would  prove  comparatively  straightforward.  Thou¬ 
sands  of  Airmen  have  deployed  as  individual  augmentees  or  have 
done  so  to  fill  positions  for  joint  expeditionary  taskings;  consequently, 
each  operational  wing  already  has  a  large  pool  of  experienced  person¬ 
nel.  If  the  Air  Force  waits  to  leverage  this  experience,  it  will  miss  a 
valuable  opportunity.  The  three  designated  people  in  the  IW  office, 
mentioned  above,  should  receive  specialized  instructor  training  at  the 
Air  Advisor  Academy  so  they  can  teach  quarterly  IW  refresher  training 
to  the  wing’s  IW  personnel.  Wing  commanders  should  then  have 
squadron  commanders  solicit  volunteers  to  fill  the  squadron's  IW  posi¬ 
tions,  giving  preference  to  experienced  individuals,  sending  them  to 
initial  training  at  the  academy,  and  having  them  undergo  quarterly 
training  from  the  wing’s  IW  office.  The  latter  instruction  should  help 
these  personnel  prepare  their  unit  members  for  deployment  taskings. 
Ideally,  when  the  wing  receives  such  a  tasking,  its  IW  office  (in  con¬ 
junction  with  squadron  commanders)  should  deploy  IW  personnel 
who  match  the  career  fields  requested  in  the  tasking.  Even  if  IW  per¬ 
sonnel  are  not  available,  regular  IW  training  at  the  unit  level  will  bet¬ 
ter  prepare  all  unit  personnel  for  IW  taskings. 

Giving  operational  wings  the  responsibility  for  these  taskings  has  sev¬ 
eral  benefits.  For  example,  the  Air  Force  can  capitalize  on  the  experi¬ 
ence  gained  by  many  of  its  members  during  the  last  decade.  Thousands 
of  Airmen  have  a  great  deal  of  combat  experience  outside  the  normal 
scope  of  their  duties,  and  the  service  should  work  hard  to  capture  that 
experience.  Fostering  a  cadre  of  IW  personnel  at  the  wing  level  and 
providing  quarterly  training  for  them  will  enhance  the  preparation  and 
quality  of  Airmen  that  the  Air  Force  sends  to  fill  these  tasks.  Rather 
than  trying  to  quickly  prepare  Airmen  just  prior  to  a  deployment,  the 
service  will  have  an  abundance  of  well-trained  personnel  for  these 
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missions.  The  greatest  benefit,  however,  will  come  from  innovation  at 
the  wing  level.  Shifting  responsibility  for  these  missions  from  central¬ 
ized,  specialized  units  to  the  larger  Air  Force  will  allow  for  greater  inge¬ 
nuity  and  innovation.  Decentralization  provides  additional  opportuni¬ 
ties  such  as  forming  regionally  aligned  wings  and  allocating  funds  for 
classroom  instruction  in  language  and  culture  for  IW  personnel  at  the 
wing  level.  Regional  alignment  would  further  enhance  the  capabilities 
of  IW  personnel  who  receive  deployment  orders.  As  global  combatant 
commanders  begin  to  see  the  benefits  of  well-trained  IW  Airmen,  they 
likely  will  encourage  further  innovation  and  improvement. 

Stage  Tlvo:  Reinstate  the  Light  Attack  and  Light  Mobility  Programs 

As  the  Air  Force  moves  greater  responsibility  for  IW  and  BPC  to  the 
wing  level,  it  must  renew  the  light  attack  aircraft  and  light  mobility  air¬ 
craft  programs.  The  service  will  never  truly  balance  its  conventional 
and  IW  capabilities  without  making  such  an  investment.  Rather  than 
compartmentalize  these  programs  in  specialized  units,  it  should  base 
the  aircraft  at  wings  tasked  with  conventional  missions,  sending  light 
attack  aircraft  to  fighter  and  bomber  wings  and  light  mobility  plat¬ 
forms  to  mobility  wings.  Basing  these  aircraft  at  wings  tasked  with  con¬ 
ventional  mission  sets  will  further  institutionalize  a  balance  between 
conventional  and  IW  missions. 

The  Air  Force  could  reduce  the  costs  and  personnel  involved  in 
fielding  light  aircraft  by  allowing  wing  pilots  to  become  dual-qualified 
in  both  these  and  primary  aircraft.  For  example,  it  could  base  light  at¬ 
tack  aircraft  at  an  F-l  6  wing,  which  could  qualify  some  or  all  of  its  pi¬ 
lots  on  them— a  decision  that  would  drastically  lessen  the  expense  of 
building  additional  squadrons  and  give  pilots  a  greater  breadth  of  expe¬ 
rience.  The  Air  Force  could  model  the  light  attack  and  light  mobility 
dual-qualification  program  on  similar  programs  at  U-2  and  B-2  bases, 
as  well  as  the  old  Accelerated  Copilot  Enrichment  program,  both  of 
which  offer  a  much  cheaper  way  of  developing  flight  experience  in  air¬ 
craft  other  than  their  primary  ones. 
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Additionally,  fighter  and  bomber  wings  could  maintain  a  limited 
number  of  dedicated  light  attack  pilots  and  dual-qualify  the  remainder, 
who  could  then  hy  either  airframe  and  gain  experience  where  the 
wing  deems  necessary.  If  the  wing  is  tasked  with  missions  in  a  permis¬ 
sive  air  environment,  it  could  deploy  its  light  attack  aircraft  and  pilots 
instead  of  the  high-cost,  less-efhcient  fighters  or  bombers.  Maintaining 
unit  readiness  with  pilots  dual-qualified  on  two  combat  airframes 
might  present  problems,  but  solutions  certainly  exist.  Squadrons  could 
designate  certain  pilots  to  maintain  a  higher  state  of  readiness  in  light 
attack  aircraft  for  a  period  of  time  and  then  periodically  rotate  those 
personnel.  Dual-qualihcation  would  also  alleviate  concerns  that  pilots 
of  the  light  attack  or  light  mobility  squadrons  are  junior  or  inferior 
partners  of  those  who  hy  more  advanced  aircraft. 

Operational  wings  would  also  have  an  excellent  additional  asset  for 
training  sorties  and  an  organic  outlet  for  cuts  in  hying  hours.  Fighter 
and  bomber  squadrons  could  use  the  light  attack  aircraft  as  support  for 
a  variety  of  their  combat  missions.  Indeed,  pilots  could  even  carry  out 
some  missions,  such  as  close  air  support,  in  either  aircraft.  During  pe¬ 
riods  of  budget  cuts  or  limitations  on  hying  hours,  the  wing  could  keep 
its  pilots  hying  by  shifting  more  sorties  to  the  light  attack  aircraft  since 
hying  hours  for  these  platforms  cost  only  a  fraction  of  those  for  fight¬ 
ers  or  bombers.  Pilot  readiness  might  decrease  slightly  in  the  wing's 
primary  aircraft,  but  the  pilots  could  continue  to  accumulate  useful 
hours  in  the  light  aircraft.  Most  of  the  benehts  described  above  would 
also  apply  to  mobility  wings  with  light  aircraft. 

Furthermore,  such  aircraft  are  far  more  feasible  with  regard  to  BPC 
in  developing  countries.  In  March  2010,  Gen  James  Mattis  promoted 
light  attack  aircraft  as  a  “means  to  build  partner  capacity  with  effec¬ 
tive,  relevant  air  support.”13  Many  partner  nations  need  reliable,  capa¬ 
ble,  and  easily  maintained  platforms  from  the  United  States  instead  of 
the  high-tech  aircraft  that  the  Air  Force  currently  operates.14  The  ser¬ 
vice  requires  organic  light  aircraft  and  trained  pilots  to  conduct  BPC 
missions  effectively.  If  operational  wings  already  possess  light  attack 
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and  light  mobility  aircraft,  then  they  can  realize  that  objective.  By  add¬ 
ing  the  ideas  from  stage  one,  wing  commanders  could  deploy  several 
light  aircraft  and  trained  IW  personnel  in  relevant  career  fields.  These 
IW  teams,  having  their  own  aircraft,  would  perform  well  in  a  variety  of 
regions  and  countries  around  the  world. 

The  Air  Force  should  quickly  initiate  the  process  of  balancing  con¬ 
ventional  and  IW  capabilities  at  the  wing  level.  To  begin,  it  should  pro¬ 
cure  15-30  light  attack  and  light  mobility  aircraft  in  the  budget  for  fis¬ 
cal  year  2015.  Fifteen  of  the  former  (including  acquisition  and 
research  and  development)  would  cost  approximately  $289  million, 
and  an  equal  number  of  the  latter  would  amount  to  about  $73  mil¬ 
lion.15  The  service  should  then  base  the  light  mobility  platforms  with 
the  two  mobility  support  advisory  squadrons  already  tasked  with  BPC 
missions  and  use  the  light  attack  aircraft  to  quickly  develop  an  initial 
cadre,  basing  them  at  a  fighter  wing  to  test  the  dual-qualification  con¬ 
cept.  Once  the  Air  Force  validates  the  idea  behind  using  these  aircraft, 
it  can  move  on  to  the  final  stage. 

Stage  Three:  Balancing  the  Force  over  Time 

Modest,  incremental  changes  over  the  long  term  are  essential  to  creat¬ 
ing  the  right  force.  If  combatant  commanders  embrace  the  concept  of 
wing  IW  cadres,  the  Air  Force  should  expand  the  program  as  necessary 
to  meet  future  needs.  Ideally,  every  operational  wing  should  have  a 
cadre  of  IW  personnel  and  the  associated  capability  of  immediately  de¬ 
ploying  fully  trained  and  equipped  individuals  for  IW  or  BPC  missions. 
It  should  also  plan  to  held  larger  numbers  of  aircraft  after  validating 
the  light  attack  and  light  mobility  concepts,  preferably  basing  light  mo¬ 
bility  platforms  at  many  operational  mobility  wings  and  light  attack 
squadrons  at  numerous  operational  fighter  and  bomber  wings.  The  Air 
Force  should  attempt  to  do  so  over  several  years  and  adjust  the  end 
state  if  it  needs  either  more  or  fewer  of  these  aircraft.  Such  a  configu¬ 
ration  would  give  the  service  the  right  force— proportional  and  capable 
of  efficiently  conducting  both  conventional  and  IW  missions. 
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Addressing  Concerns 

The  proposals  offered  here  certainly  raise  valid  concerns,  such  as 
the  associated  effects  of  reduced  combat  capability  and  elevated  man¬ 
ning  requirements.16  The  combat  issue  should  not  prove  too  problem¬ 
atic  since  light  aircraft  are  intended  only  for  permissive  air  environ¬ 
ments  or  partnership  missions.  The  actual  costs  of  these  aircraft  are 
minuscule  compared  to  those  of  typical  Air  Force  acquisitions  and  are 
easily  manageable  if  spread  out  over  several  years.  The  service  can 
minimize  manpower  expenses  if  it  allows  pilots  to  dual-qualify  on 
their  primary  aircraft  and  light  aircraft,  but  additional  manpower  and 
maintenance  costs  will  remain.  However,  it  should  view  these  margin¬ 
ally  higher  outlays  in  terms  of  the  increased  capabilities  of  light  air¬ 
craft  and  well-trained  IW  personnel.  By  adding  approximately  six  air¬ 
craft,  five  pilots,  and  18  maintenance  personnel  per  unit,  the  Air  Force 
could  fully  equip  multiple  squadrons  for  operations  across  the  conflict 
spectrum,  expand  the  pilot  pool  to  meet  a  variety  of  needs,  and  pro¬ 
duce  experienced  pilots  more  quickly  and  cost-effectively. 

The  range,  response  time,  and  risk  of  light  attack  aircraft  also  repre¬ 
sent  legitimate  concerns,  the  former  two  considered  a  measure  of  how 
quickly  the  Air  Force  can  respond  to  ground  forces'  call  for  support.  A 
fighter  jet  can  be  on  station  to  provide  such  support  much  faster  than  a 
light  aircraft,  but  viable  solutions  to  these  issues  exist.  Specifically,  the 
service  must  move  beyond  the  recent  model  of  centralizing  all  of  its 
combat  assets  at  one  or  two  bases  in-theatre— a  necessity  for  advanced 
jet  aircraft  but  not  for  light  aircraft,  which  can  operate  out  of  smaller 
airfields  closer  to  ground  forces  and  thus  improve  response  times  and 
range  considerations.  Just  as  the  Army  and  Marine  Corps  always  sta¬ 
tion  aviation  assets  close  to  their  corresponding  maneuver  units,  so 
could  the  Air  Force  expand  these  helicopter-centric  bases  into  small 
airfields  capable  of  accommodating  both  rotary-wing  and  light  aircraft. 

With  regard  to  the  risks  associated  with  employing  light  aircraft  in 
permissive  air  environments  where  surface-to-air  threats  still  operate, 
one  must  understand  that  all  combat  environments  entail  risks.  Rotary 
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aircraft  from  all  of  the  different  services  already  operate  in  these  envi¬ 
ronments,  and  light  aircraft  are  far  more  survivable  than  helicopters. 
Such  risk-based  arguments  against  light  aircraft  are  disingenuous  and 
overlook  the  substantial  dangers  that  rotary  aircrews  successfully  deal 
with  in  combat  zones  every  day. 

Perhaps  the  greatest  concern  is  that  expanding  IW  capabilities  will 
threaten  primary  Air  Force  core  functions  such  as  air  and  space  supe¬ 
riority,  rapid  global  mobility,  and  global  strike.  Granted,  these  func¬ 
tions  will  always  have  priority  over  IW— and  rightly  so— but  this 
should  not  prevent  the  service  from  gradually  balancing  its  force  over 
the  long  term. 


Conclusion 

No  doubt,  General  Welsh  will  confront  a  number  of  challenges  dur¬ 
ing  his  tenure  as  chief  of  staff.  To  continue  its  mastery  of  the  air,  the 
Air  Force  must  acquire  the  F-35  and  replace  or  upgrade  other  aging 
airframes.  However,  the  task  of  updating  an  aging  fleet  need  not  sup¬ 
plant  all  other  priorities.  In  the  future,  our  nation  will  call  on  its  armed 
forces  to  perform  missions  across  the  spectrum  of  warfare;  conse¬ 
quently,  the  Air  Force  should  build  a  force  capable  of  efficiently  an¬ 
swering  any  such  request.  Budget  issues  will  exist  in  the  near  future, 
but  the  service  can  afford  to  build  up  its  IW  capabilities  incrementally. 
Maintaining  the  status  quo  will  permit  the  Air  Force  to  continue  its 
conventional  superiority,  but  it  will  be  forced  to  send  F-22s  and  F-35s, 
instead  of  A-lOs  and  F-16s,  to  austere,  permissive  locations.  TWenty- 
hve  years  from  now,  costs  associated  with  flight  hours  and  service  life 
of  fifth-generation  fighters  will  prove  astronomical  in  an  irregular  con¬ 
flict.  Is  this  really  what  we  want  when  we  can  start  changing  now?  © 
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Computer  Security 

the  Achilles’  heel  of  the  electronic  Air  Force?* 

Lieutenant  Colonel  Roger  R.  Schell 


The  KGB  officer  addressed  the  select  group  of  Soviet  officials 
with  his  usual  tone  of  secrecy  but  an  unusual  air  of  excitement: 

Comrades,  today  I  will  brief  you  on  the  most  significant  break¬ 
through  in  intelligence  collection  since  the  “breaking”  of  the  “un¬ 
breakable”  Japanese  and  German  cyphers  in  World  War  II — the  pen¬ 
etration  of  the  security  of  American  computers.  There  is  virtually  (if 
not  literally)  no  major  American  national  defense  secret  which  is  not 
stored  on  a  computer  somewhere.  At  the  same  time,  there  are  few  (if 
any)  computers  in  their  national  defense  system  which  are  not  ac¬ 
cessible,  in  theory  if  not  yet  in  fact,  to  our  prying.  Better  still,  we 
don’t  even  have  to  wait  for  them  to  send  the  particular  information 
we  want  so  we  can  intercept  it;  we  can  request  and  get  specific  mate¬ 
rial  of  interest  to  us,  with  virtually  no  risk  to  our  agents. 

*Reprinted  from  Air  University  Review  30,  no.  2  (January-February  1979):  16-33. 
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The  Americans  have  developed  a  “security  kernel”  technology 
for  solving  their  problem,  but  we  need  not  be  concerned — they  re¬ 
cently  discontinued  work  on  this  technology.  They  are  aware  of  the 
potential  for  a  computer  security  problem,  but  with  their  usual  care¬ 
lessness  they  have  decided  not  to  correct  the  problem  until  they 
have  verified  examples  of  our  active  exploitation.  We,  of  course, 
must  not  let  them  find  these  examples. 

Your  first  reaction  to  this  scenario  may  be,  “Preposterous!” 
But  before  you  reject  it  out  of  hand,  recognize  that  we  know  it 
could  happen.  The  question  is:  Will  we  apply  sound  technology 
and  policy  before  it  does  happen?  To  be  sure,  there  are  things  we 
do  not  know  about  the  probability  of  success  of  such  an  effort,  but 
we  can  rationally  assess  the  most  salient  controlling  factors: 

•  The  high  vulnerability  of  contemporary  computers  has  been 
clearly  indicated  in  the  author’s  experience  with  undetected  pene¬ 
tration  of  security  mechanisms.  In  addition,  security  weaknesses 
are  documented  in  both  military  and  civil  reports. 

•  The  capability  of  the  Soviets  (or  any  other  major  hostile  group) 
to  accomplish  the  required  penetration  is  quite  evident.  In  fact,  no 
particular  skills  beyond  those  of  normally  competent  computer 
professionals  are  required. 

•  The  motivation  for  such  an  information  collection  activity  is 
apparent  in  prima  facie  evidence.  The  broad  scope  and  high  inten¬ 
sity  of  Soviet  intelligence  efforts  in  areas  such  as  communication 
interception  are  frequently  reported. 

•  The  potential  damage  from  penetration  is  growing  with  the 
ever  increasing  concentration  of  sensitive  information  in  comput¬ 
ers  and  the  interconnection  of  these  computers  into  large  networks. 
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Through  computer  penetration  an  enemy  could,  for  example,  com¬ 
promise  plans  for  employment  of  tactical  fighters  or  compromise 
operational  plans  and  targeting  for  nuclear  missiles. 

•  The  opportunity  for  hostile  exploitation  of  these  vulnerabili¬ 
ties  is  increasing  markedly  both  because  of  the  increased  use  of 
computers  and  the  lack  of  a  meaningful  security  policy  controlling 
their  use.  In  the  name  of  efficiency  many  more  people  with  less  (or 
no)  clearance  are  permitted  easier  access  to  classified  computer 
systems. 

We  have  a  problem  and  a  solution  in  hand.  Detailed  examina¬ 
tion  of  a  hostile  nation’s  (e.g.,  Soviet)  capability  and  motivation  in 
those  areas  is  properly  in  the  realm  of  the  intelligence  analyst  and 
largely  outside  the  scope  of  this  article.  However,  it  will  trace  the 
outlines  of  the  computer  security  problem  and  show  how  the  secu¬ 
rity  kernel  approach  meets  the  requirements  for  a  workable  solu¬ 
tion — although  recent  termination  has  nipped  in  the  bud  very 
promising  work  toward  a  solution. 

What  Makes  Computers  a  Security  Problem? 

Although  a  certain  appreciation  of  subtlety  is  needed  to  un¬ 
derstand  the  details  of  the  computer  security  problem,  our  objec¬ 
tive  here  is  to  illuminate  the  basic  underlying  issues.  To  understand 
these  issues,  I  will  examine  not  only  the  capabilities  and  limita¬ 
tions  of  computers  themselves  but  also  their  uses. 

First,  we  take  for  granted  the  fundamental  need  to  protect 
properly  classified  sensitive  military  information  from  compro¬ 
mise.  Security  has  long  been  recognized  as  one  of  the  basic  prin¬ 
ciples  of  war,  and  throughout  history  security  or  its  lack  has  been 
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a  major  factor  of  the  outcome  of  battles  and  wars.  We  can  and  do 
strictly  control  information  when  the  dissemination  is  on  paper.  It 
is,  therefore,  illogical  to  ignore  the  fact  that  computers  may  dis¬ 
seminate  the  same  information  to  anyone  who  knows  how  to  ask 
for  it,  completely  bypassing  the  expensive  controls  we  place  on 
paper  circulation. 

Second,  we  must  appreciate  that  “exploitation  of  the  phenom¬ 
enal  growth  of  computer  science  is  a  major  area  of  technological 
emphasis  within  DoD.”1  We  currently  lack  quantitative  superiority 
(or  even  parity)  in  several  force  level  areas,  and  computers  appear 
to  be  able  to  provide  the  qualitative  superiority  we  must  have.  The 
need  for  these  capabilities  is  clear  when  we  realize  that  “good  C3 
[command,  control,  and  communications]  capabilities  can  double 
or  triple  force  effectiveness;  conversely,  ineffective  C3  is  certain  to 
jeopardize  or  deny  the  objective  sought.”2  Indeed,  we  have  in  a 
very  real  sense  become  an  “electronic  Air  Force”3  with  computers 
at  our  heart. 

Finally,  we  need  to  recognize  that  some  major  vulnerabilities 
may  accompany  the  substantial  benefits  of  computer  technology. 
Most  decision-makers  cannot  afford  the  time  to  maintain  a  thorough 
understanding  of  explosively  developing  computer  technology.  But 
they  can  even  less  afford  to  be  ignorant  of  what  the  computer  can  do 
and  also  of  how  it  can  fail.  In  particular,  a  commander  responsible 
for  security  must  ensure  that  dissemination  controls  are  extended  to 
computers.  He  must  be  able  to  ask  proper  questions — to  surface  po¬ 
tential  vulnerability  for  critical  and  unbiased  examination. 
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historical  lessons  in  emerging  technology 

It  is  not  new  to  find  that  an  emerging  technology  is  a  mixed  bless¬ 
ing.  In  particular,  the  threat  facing  computers  today  is  illustrated  in 
the  evolution  of  military  electrical  communications — an  earlier 
revolutionary  technology.  Our  compromise  of  the  security  of  Axis 
communications  was  fundamental  to  the  outcome  of  World  War  II, 
and  computers  now  offer  our  enemies  the  opportunity  to  turn  the 
tables  on  us. 

Military  communication  specialists  early  recognized  the  vul¬ 
nerability  of  electrical  transmission  to  interception,  e.g.,  through 
wire  taps  or  surreptitious  listening  to  radio  signals.  The  solutions 
were  simple  and  effective  but  drastic:  restrict  transmission  only  to 
relatively  unimportant  (viz.,  unclassified)  information  or  to  trans¬ 
mission  paths  physically  guarded  and  protected  from  intrusion. 
Likewise,  for  several  years  the  Air  Force  restricted  computer  use  to 
either  unclassified  data  or  to  a  protected  computer  dedicated  to 
authorized  (cleared)  users.  In  both  instances  the  security  solutions 
limited  use  of  the  technology  where  most  needed:  for  important 
information  in  potentially  hostile  situations,  such  as  battlefield 
support. 

The  communication  security  restrictions  gave  rise  to  various 
cryptographic  devices.  These  devices  were  to  encode  information 
into  an  unintelligible  and  thus  unclassified  form  so  that  protection 
of  the  entire  transmission  path  was  not  required.  But  (of  paramount 
importance  to  us  here)  this  dramatically  changed  the  very  nature  of 
the  security  problem  itself:  from  a  question  of  physical  protection 
to  a  question  of  technical  efficacy.  The  effectiveness  of  the  crypto¬ 
graphic  devices  was  argued,  based  not  on  careful  technical  analy¬ 
sis  but  rather  on  the  apparent  absence  of  a  known  way  to  counter 
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them.  Presently,  computer  technology  is  in  a  position  analogous 
with  a  similar  argument  for  its  effectiveness  against  unauthorized 
access  to  computerized  information.  In  both  instances,  the  argu¬ 
ments  seem  to  offer  an  acceptable  risk  in  spite  of  a  de  facto  weak 
technical  foundation. 

Technically  weak  cryptographic  devices  found  widespread 
military  use  because  of  false  confidence  and  the  pressing  opera¬ 
tional  need  for  electrical  communications.  One  notable  example 
was  the  Enigma  machine  used  by  the  Germans  during  World  War 
II.  Their  high-level  national  command  and  control  network  used  it 
for  communication  security  throughout  the  war.  As  The  Ultra  Se¬ 
cret  records,  “the  Germans  considered  that  their  cypher  was  com¬ 
pletely  safe.”4  Yet,  before  the  war  really  got  started,  the  British 
had  in  fact  “solved  the  puzzle  of  Enigma.”5  The  Air  Force  is  devel¬ 
oping  a  similar  dependency  with  each  (formal  or  de  facto)  deci¬ 
sion  to  accredit  computer  security  controls.  In  either  case  policy 
decisions  permit  a  technical  weakness  to  become  a  military  vul¬ 
nerability. 

Examples  during  World  War  II  show  how  the  tendency  to  de¬ 
fend  previous  decisions  (to  accept  and  use  mere  plausible  tech¬ 
niques)  assures  the  enemy  of  opportunities  for  exploitation.  In  Eu¬ 
rope  the  broken  Enigma  signals  (called  Ultra)  “not  only  gave  the 
full  strength  and  disposition  of  the  enemy,  it  showed  that  the  Allied 
[troops]  could  achieve  tactical  surprise.”6  In  fact,  General  Dwight 
Eisenhower  stated  that  “Ultra  was  decisive.”7  The  Codebreakers 
describes  a  similar  misplaced  trust  by  the  Japanese  and  notes  that 
American  cryptanalysts  “contributed  enormously  to  the  defeat  of 
the  enemy,  greatly  shortened  the  war,  and  saved  many  thousands 
of  lives.”8  To  be  sure,  the  Germans  “must  have  been  puzzled  by  our 
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knowledge  of  their  U-boat  positions,  but  luckily  they  did  not  ac¬ 
cept  the  fact  that  we  had  broken  Enigma.”9  Similarly,  the  Japanese 
“hypnotized  themselves  into  the  delusion  that  their  codes  were 
never  seriously  compromised.”10  The  Axis  establishment,  it  seems, 
would  not  acknowledge  its  security  weakness  without  direct  con¬ 
firming  counterintelligence — and  this  came  only  after  they  had 
lost  the  war.  As  for  Air  Force  computer  security,  the  absence  of  war 
has  precluded  ultimate  exploitation;  yet,  the  lack  of  hard  counter¬ 
intelligence  on  exploitation  has  already  been  offered  as  evidence 
of  effective  security. 

Although  technical  efforts  led  to  these  devastating  vulnerabil¬ 
ities,  it  was  nonetheless  the  technical  experts  like  William  Fried¬ 
man  who  provided  a  sound  technical  basis:  “His  theoretical  stud¬ 
ies,  which  revolutionized  the  science,  were  matched  by  his  actual 
solutions,  which  astounded  it  [the  scientific  community].”11  Today 
our  military  makes  widespread  use  of  cryptographic  devices  with 
confidence.  For  computers,  as  for  communications,  the  nub  of  the 
problem  is  the  effectiveness  of  the  security  mechanism.  Recent 
logically  rigorous  work  has  resulted  in  a  security  kernel  technol¬ 
ogy.  However,  DOD  is  not  yet  applying  this  technology. 

The  thrust  of  this  historical  review  is  captured  in  the  maxim, 
“Those  who  cannot  remember  the  past  are  condemned  to  repeat 
it.”  The  historical  parallels  are  summarized  in  Table  I.  The  main 
lesson  to  be  learned  is  this:  Do  not  trust  security  to  technology  un¬ 
less  that  technology  is  demonstrably  trustworthy,  and  the  absence 
of  demonstrated  compromise  is  absolutely  not  a  demonstration  of 
security. 
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Electrical 

Electronic 

Communications 

Limited  Use 

Computers 

unclassified  only 

unclassified  only 

protected  paths 

Plausible  Security 

dedicated  facility 

cryptographic  technology 

internal  security 

crucial  to  security 

controls  crucial 

no  known  counter 

no  known  penetration 

weak  technical 

weak  technical 

foundation 

Unwarranted  Dependence 

foundation 

false  confidence  in 

false  confidence  in 

cryptography 

internal  controls 

policy  acceptance 

Underestimated  Enemy 

policy  acceptance 

repeated  and  undetected 

repeated,  undetected,  and 

interception 

selective  access 

advocates  demand 

advocates  demand 

counterintelligence 

Adequate  Technology 

counterintelligence 

information  theory 

security  kernel 

Table  1.  Comparative  evolution  of  security  problems 

distinction  between  computation  and  protection 

A  given  computer  in  one  installation  may  securely  handle  sensitive 
data,  and  an  identical  machine  may  be  totally  insecure  in  another 
installation.  The  key  to  understanding  the  computer  security  prob¬ 
lem  is  to  distinguish  when  the  computer  provides  only  computa- 
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tion  and  when  it  must  also  provide  security.  These  are  two  very 
distinct  cases. 

In  the  first  case,  commonly  called  “dedicated  mode,”  the  com¬ 
puter  and  all  its  users  are  within  a  single  security  perimeter  estab¬ 
lished  by  guards,  dogs,  fences,  etc.  By  the  use  of  secure  communi¬ 
cations,  this  perimeter  may  be  geographically  extended  to  remote 
terminals.  Only  these  external  security  controls  are  required  to 
maintain  the  security  of  the  system.  Use  of  the  computer  is  re¬ 
stricted  so  that  at  any  time  all  the  users,  remote  or  local,  are  autho¬ 
rized  access  to  all  the  computerized  information.  A  potential  at¬ 
tacker  must  overcome  the  external  controls  and  penetrate  the  inner 
sanctum  of  cleared  personnel.  The  computer  provides  only  compu¬ 
tation;  no  failure  or  subversion  of  the  computer  itself  can  compro¬ 
mise  security  because  of  the  protected  environment. 

In  the  second  case,  commonly  called  “multilevel  mode,”  the 
computer  itself  must  internally  distinguish  multiple  levels  of  infor¬ 
mation  sensitivity  and  user  authorization.  In  particular,  the  com¬ 
puter  must  protect  some  information  from  certain  users.  For  multi¬ 
level  mode,  internal  security  controls  of  hardware  and  computer 
programs  must  assure  that  each  user  may  access  only  authorized 
information.  For  multilevel  security  the  computer  itself  must 
clearly  provide  protection  as  well  as  computation.  For  the  potential 
attacker,  simply  gaining  access  to  the  peripheral  users  of  the  com¬ 
puter  will  suffice — if  he  can  penetrate  the  internal  controls. 

Multilevel  security  controls  function  analogously  to  a  crypto¬ 
graphic  device;  their  effectiveness  is  central  to  information  secu¬ 
rity.  Because  of  the  inherent  structure  of  computers,  a  multilevel 
security  weakness  invites  repeated  exploitation.  Furthermore, 
those  security  failures  internal  to  the  computer  are  almost  certain 
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to  be  undetected.  In  contrast  to  communications  where  enemy  ac¬ 
cess  to  important  traffic  is  a  matter  of  chance,  in  a  penetrated  com¬ 
puter  he  has  selective  access,  not  only  for  extraction  but  also  for 
modification  of  information  of  his  choosing.  All  the  worse,  the 
processing  power  of  modern  computers  provides  this  information 
rapidly  and  completely. 

If  we  are  worried  about  protecting  our  cryptographic  codes, 
then  we  are  indeed  foolish  to  neglect  our  computers.  And  we  must 
realize  that  multilevel  mode  can  aid  the  attacker  unless  the  internal 
controls  of  the  computer  itself  provide  reliable  protection. 

evidence  of  weak  security  controls 

The  critical  question  then  is  this:  Dare  we  trust  the  internal  security 
controls  of  computer  programs  and  hardware?  The  author’s  experi¬ 
ence  with  security  weaknesses  indicates  that  contemporary  com¬ 
puters  do  not  provide  reliable  protection.  Computers  proposed  as 
sufficiently  secure  to  protect  sensitive  information  were  checked 
for  security  shortcomings.  A  formally  sanctioned  “tiger  team” 
looked  for  weaknesses  in  these  supposedly  secure  computers.  (For 
accuracy  the  examples  will  be  limited  to  those  evaluations  in  which 
the  author  personally  participated.) 

The  tiger  team  operated  as  a  legitimate  user  with  only  limited 
access  to  a  small  part  of  the  information  in  the  system.  The  team 
objective  was  to  penetrate  internal  security  controls  and  demon¬ 
strate  that  unauthorized  access  could  be  gained.  In  every  instance 
of  the  author’s  experience,  serious  security  weaknesses  were  dis¬ 
covered  after  only  a  few  hours  or  days  of  effort. 
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Passwords  for  the  asking.  A  common  element  of  protection  is 
a  secret  password  or  key  that  the  user  must  provide  in  order  to  re¬ 
ceive  services  or  information.  To  be  effective  the  secrecy  of  the 
passwords  must  be  preserved.  An  IBM  370  computer  with  the 
time-sharing  option  (TSO)  had  remote  terminals  in  various  uncon¬ 
trolled  areas;  the  secret  passwords  restricted  the  users’  access.  This 
particular  computer  contained  sensitive  Air  Force  procurement 
source-selection  information  with  tightly  controlled  dissemina¬ 
tion.  The  tiger  team  members  found  that  they  had  merely  to  ask  by 
name  for  the  password  file  and  the  passwords  for  all  the  TSO  users 
would  be  printed  for  them — without  a  trace  that  the  passwords  had 
been  compromised.  The  designers  had  overlooked  the  relationship 
between  security  and  the  ability  to  print  a  file. 

Good  commercials  not  enough.  In  the  Pentagon  a  General 
Electric  system  called  “GCOS”  provided  classified  (secret)  com¬ 
putation  for  the  Air  Staff  and  others  with  secured  remote  terminals 
at  selected  locations.  The  manufacturer  made  an  advertising  thrust 
about  his  security.  Air  Force  advocates  proposed  making  a  multi¬ 
level  system  by  adding  unsecured  remote  terminals,  for  unclassi¬ 
fied  uses,  for  better  coordination  and  efficiency.  Again,  passwords 
were  to  protect  the  sensitive  information.  When  a  user  presented 
his  password  to  the  computer,  GCOS  checked  a  list  of  passwords 
to  verify  the  user’s  legitimacy.  To  make  this  check,  GCOS  copied 
part  of  the  list  into  its  main  memory.  Among  other  flaws,  the  tiger 
team  found  that  GCOS  left  this  copy  of  the  passwords  where  it 
could  be  printed  easily  and  without  trace.  The  designers  had  over¬ 
looked  the  possibility  of  deliberate  misuse  of  a  necessary  computer 
function. 


January-February  2013 


Air  &  Space  Power  Journal  |  168 


V  Historical  Highlight 


Government  designers  not  perfect.  After  the  Pentagon  pene¬ 
tration,  some  advocates  claimed  that  government  designers  with  a 
greater  awareness  of  security  could  avoid  such  flaws.  An  organiza¬ 
tion  that  processed  sensitive  intelligence  data  spent  a  substantial 
effort  “fixing”  basically  the  same  GCOS  system.  They  were  confi¬ 
dent  they  could  maintain  multilevel  mode  security.  The  tiger  team 
found  that  these  “fixes”  could  easily  be  circumvented.  In  this  case 
not  only  could  any  user  get  at  any  information  in  the  system  but 
also  he  could  access  the  classified  information  in  computers  con¬ 
nected  in  a  network  with  that  computer! 

A  contract  cannot  provide  security.  Basically  the  same  GCOS 
system  was  selected  for  a  major  command  and  control  system.  Ad¬ 
vocates  assured  the  users  that  it  would  be  made  multilevel  secure 
because  security  was  required  by  the  contract.  An  extensive  tiger 
team  evaluation  found  there  were  many  deep  and  complex  security 
flaws  that  defied  practical  repair — the  computer  was  finally  deemed 
not  only  insecure  but  insecurable. 

The  best  security  is  not  good  enough.  Honeywell  Information 
Systems,  with  DOD  sponsorship,  modified  the  GCOS  computer  in 
an  effort  to  improve  several  areas  substantially,  including  security. 
The  resulting  Multiplexed  Information  and  Computing  Service 
(Multics)  was  widely  touted  for  its  security.  The  tiger  team  used  an 
Air  Force  laboratory  computer  to  evaluate  Multics  as  a  potential 
multilevel  secure  computer  for  the  Pentagon.  Although  it  had  the 
best  security  design  of  any  system  encountered,  the  tiger  team 
found  several  implementation  flaws.12  In  one  case  Multics  first 
checked  a  prospective  user’s  authorization  for  access  to  informa¬ 
tion  and,  when  the  request  proved  valid,  executed  the  request. 
However,  the  user  could  change  the  request  after  the  validity  check 
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but  before  execution;  Multics  then  executed  the  changed  request, 
allowing  unauthorized  access.  This  penetration  of  Multics  came 
from  an  implementation  short  cut  made  to  improve  efficiency. 

Encrypted  passwords  retrieved.  The  Multics  system  internally 
encrypted  its  password  list  so  that  even  if  printed  out  the  pass¬ 
words  were  not  intelligible.  When  a  user  presented  his  password,  it 
was  encrypted  and  then  compared  to  the  encrypted  list.  The  tiger 
team  used  the  penetration  technique  developed  on  the  laboratory 
computer  to  access  the  encrypted  password  list  of  a  large  univer¬ 
sity  and  then  broke  the  cypher  to  obtain  all  the  passwords. 

Trap  door  installed.  The  tiger  team  penetrated  Multics  and 
modified  the  manufacturer’s  master  copy  of  the  Multics  operating 
system  itself  by  installing  a  trap  door:  computer  instructions  to 
deliberately  bypass  the  normal  security  checks  and  thus  ensure 
penetration  even  after  the  initial  flaw  was  fixed.  This  trap  door  was 
small  (fewer  than  10  instructions  out  of  100,000)  and  required  a 
password  for  use.  The  manufacturer  could  not  find  it,  even  when 
he  knew  it  existed  and  how  it  worked.  Furthermore,  since  the  trap 
door  was  inserted  in  the  master  copy  of  the  operating  system  pro¬ 
grams,  the  manufacturer  automatically  distributed  this  trap  door  to 
all  Multics  installations. 

Audit  record  destroyed.  Some  have  argued  that  a  computer 
need  not  always  prevent  unauthorized  access  as  long  as  it  keeps  an 
audit  record  of  such  accesses.  The  Multics  system  kept  a  protected 
audit  record  of  access,  and  the  tiger  team’s  unauthorized  accesses 
were  recorded.  However,  the  audit  record  was  itself  subject  to  un¬ 
authorized  access.  The  tiger  team  merely  modified  the  record  to 
delete  all  trace  of  its  actions,  such  as  insertion  of  the  trap  door. 
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Even  fixes  have  holes.  Honeywell  produced  a  new  Multics 
computer  that  corrected  all  the  implementation  flaws  reported  by 
the  tiger  team.  The  tiger  team  used  Honeywell’s  new  computer  at 
their  Phoenix,  Arizona,  manufacturing  plant  and  penetrated  the  se¬ 
curity  again.13  This  new  flaw  resulted  from  changes  made  to  cor¬ 
rect  the  previous  ones!  It  was  becoming  increasingly  clear  that 
providing  a  multilevel  secure  computer  was  indeed  difficult. 

Trojan  horse  not  dead.  While  some  had  recognized  the  prob¬ 
lem,  advocates  in  the  Air  Staff  were  commending  an  installation 
for  their  multilevel  security  solution  on  another  computer.  The  so¬ 
lution  consisted  of  programs  to  segregate  the  classified  and  unclas¬ 
sified  information.  There  were  no  remote  terminals,  but  users  could 
submit  unclassified  jobs  to  the  computer  without  security  checks. 
From  an  unclassified  job  the  tiger  team  penetrated  the  underlying 
computer  operating  system  and  modified  the  solution  into  a  Trojan 
horse,  an  apparently  useful  program  that  concealed  harmful  capa¬ 
bilities.  The  Trojan  horse  hid  an  invisible  copy  of  classified  jobs.  A 
later  unclassified  job  retrieved  the  hidden  information,  compro¬ 
mising  security.  Thus  the  security  solution  was  not  only  ineffective 
but  it  actually  exacerbated  the  security  problem. 

The  obvious  moral.  Few  if  any  contemporary  computer  secu¬ 
rity  controls  have  prevented  a  tiger  team  from  easily  accessing  any 
information  sought.  These  examples  are  by  no  means  exhaustive; 
they  must  not  be  used  to  infer  predominance  of  certain  flaws  or  to 
associate  particular  weaknesses  with  only  a  few  manufacturers. 
Others  have  comparable  security  problems. 
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futility  of  evaluation  by  penetration 

In  a  very  real  sense  the  Air  Force  has  been  fortunate  that  security 
is  so  poor  in  current  computers — the  greater  danger  will  come 
when  the  argument  that  a  computer  is  secure  because  tiger  teams 
failed  to  penetrate  it  appears  plausible.  Indeed,  evaluating  internal 
computer  security  controls  is  a  most  difficult  challenge.  As  with 
cryptography,  there  are  basically  two  approaches. 

If  the  security  controls  are  based  on  a  carefully  formulated, 
sound  technology,  then  they  may  be  subject  to  rational  analysis  of 
their  effectiveness.  As  already  noted,  this  is  generally  not  true  of 
contemporary  computers.  The  security  kernel  approach,  which  is 
subject  to  such  methodical  technical  analysis,  will  also  be  dis¬ 
cussed. 

Alternatively,  an  advocate  can  simply  search  for  ways  to  pen¬ 
etrate  a  computer’s  controls;  failing  to  penetrate,  he  can  plausibly 
argue  there  is  no  way  to  penetrate  since  none  is  known  (to  him).  If 
a  security  hole  is  found,  it  can  first  be  patched  before  arguing  for 
security.  Obviously,  this  argument  suffers  acutely  from  both  theo¬ 
retical  and  practical  difficulties. 

In  principle,  one  could  test  all  possible  programs  to  find  any 
that  led  to  a  security  penetration.  This  method  of  exhaustion  would 
be  effective  but  is  far  beyond  the  realm  of  feasibility.  For  any  sub¬ 
stantial  computer  this  would  take  so  long  that  before  the  evaluation 
was  finished  the  sun  would  literally  have  burned  out!  Thus,  a  real¬ 
izable  evaluation  by  exhaustion  must  be  so  incomplete  as  to  be 
ludicrous. 


January-February  2013 


Air  &  Space  Power  Journal  |  172 


V  Historical  Highlight 


In  fact  the  effort  spent  in  penetrating  and  patching  yields  poor 
marginal  return  in  terms  of  security.  The  tiger  team  examples  indi¬ 
cate  some  of  the  difficulties: 

First,  experience  shows  that  new  penetrators  tend  to  find  new 
holes — even  after  previous  teams  have  found  all  they  could.  It 
seems  unlikely  that  a  real  attacker  will  not  involve  new  people. 

Second,  holes  do  not  generally  result  from  rank  stupidity  but 
from  human  oversight  in  dealing  with  a  difficult  design  problem. 
Thus  the  fixes  themselves  are  likely  to  be  flawed. 

Third,  it  does  not  take  a  highly  specialized  expert  to  pene¬ 
trate  security.  It  is  true  that  most  computer  professionals  do  not 
know  ways  to  penetrate  the  systems  they  use;  they  want  to  do  a 
job,  not  interfere  with  it.  Yet  when  given  the  assignment,  even 
junior  and  inexperienced  professionals  have  consistently  suc¬ 
ceeded  in  penetration. 

Fourth,  the  exposure  to  attack  is  frequently  much  greater  than 
from  just  the  known  system  users.  Commercial  telephone  connec¬ 
tions  to  military  systems  are  increasing  and  give  worldwide  ac¬ 
cess.  Communication  taps  also  give  access  to  unsecured  direct 
connections;  microwave  intercepts  by  the  Soviets  in  the  U.S.,  as 
recently  revealed  by  the  White  House,  demonstrate  this  capability. 
Lack  of  strict  security  control  on  the  submission  of  computer  jobs 
allows  attacks  in  the  name  of  a  legitimate  user  even  for  computers 
without  remote  terminals.  Interconnection  to  other  computers  can 
add  a  large  group  of  unknown  users  as  well. 

Fifth,  the  attacks  can  be  developed  and  perfected  on  other  than 
the  target  computer.  A  similar  computer  owned  or  legitimately  ac¬ 
cessed  by  the  attacker  can  be  used  to  minimize  the  risk  of  de  tec  - 
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tion.  Once  perfected,  the  attack  methods  can  be  applied  to  the  tar¬ 
get  computer. 

Finally,  to  a  hostile  penetrator  the  trap  door  and  Trojan  horse 
approaches  are  probably  the  most  attractive,  and  these  deliberately 
created  flaws  in  computer  programs  are  the  most  difficult  to  detect. 
Most  tiger  teams  concentrate  on  accidental  flaws  that  anyone  might 
happen  to  find,  but  the  deliberate  flaws  are  dormant  until  activated 
by  an  attacker.  These  errors  can  be  placed  virtually  anywhere  and 
are  carefully  designed  to  escape  detection.  Yet  most  military  sys¬ 
tems  include  programs  not  developed  in  a  secure  environment,  and 
some  are  even  developed  abroad.  In  fact  some  systems  can  be  sub¬ 
verted  by  an  anonymous  remote  technician  with  no  legitimate  role 
in  the  system  development.  These  errors  can  be  activated  by  es¬ 
sentially  any  external  interface — from  an  unclassified  telegram  to 
a  unique  situation  set  up  for  detection  by  a  surveillance  system. 

On  balance,  penetrating  and  patching  internal  controls  is  not 
a  promising  security  technique.  Even  without  the  prospect  of  trap 
doors  and  Trojan  horses  and  without  military  security  demands, 
“private  companies  have  attempted  to  patch  holes  in  so-called  [se¬ 
cure]  computer  systems,  and  after  millions  of  dollars  and  years  of 
effort,  they  gave  up  in  failure.”14  This  approach  is  little  more  than 
a  game  of  wits  in  which  the  designer  must  try  to  find  (and  patch) 
all  the  holes  while  the  enemy  need  find  (and  exploit)  but  one  re¬ 
maining  hole — a  rather  unbalanced  contest. 

The  “bottom  line”  is  simple.  The  commander  responsible  for 
security  in  a  computer  system  needs  an  unequivocal  answer  to  one 
crucial  question:  Is  security  dependent  on  internal  controls?  That 
is,  is  there  any  failure  or  subversion  of  the  computer  itself  that 
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could  degrade  security?  If  so,  with  contemporary  computers  he  has 
a  root  inconsistency  in  the  laxity  about  computer  security  within 
the  military  environment  that  normally  has  strict  controls  on  dis¬ 
semination  of  sensitive  information. 

Computer  Security 
Alternatives 

We  have  seen  that  in  contemporary  computers  the  internal 
controls  are  not  only  ineffective  but  also  defy  assessment.  Yet  ob¬ 
viously  we  can  choose  to  follow  the  path  of  the  German  and  Japa¬ 
nese  cryptographic  experience — underestimating  enemy  exploita¬ 
tion  of  the  technical  weaknesses.  This  is  the  chance  we  have  taken 
in  each  of  several  Air  Force  decisions  to  operate  contemporary 
computers  in  a  multilevel  mode. 

If  we  lose  this  gamble,  the  damage  depends  on  what  the  com¬ 
puter  is  protecting.  It  can  range  from  violation  of  personal  privacy 
to  fraud,  battlefield  damage,  or  pre-emptive  surprise  attack.  For 
example,  it  has  been  proposed  that  the  Air  Force  dynamically  re¬ 
target  its  strategic  ballistic  missiles;  this  supports  the  national  pol¬ 
icy  of  flexible  response  and  would  allow  application  of  retaliatory 
weapons  to  the  most  lucrative  military  targets.  However,  comput¬ 
ers  are  at  the  heart  of  this  capability;  if  they  were  penetrated,  an 
enemy  could  retarget  the  missiles  to  impact  on  low-value  or  even 
friendly  targets  as  part  of  a  surprise  attack! 

We  will  not  attempt  to  explore  the  numerous  possible  scenar¬ 
ios  from  dependence  on  weak  techniques,  but  we  will  look  at  solu¬ 
tion  alternatives.  Both  technical  and  policy  issues  are  involved. 
Basically,  the  Air  Force  has  two  alternatives  other  than  to  ignore 
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the  problem:  either  limit  computer  use  or  use  available  adequate 
technology  to  make  the  internal  controls  reliable. 

avoid  dependence  on  internal  controls 

The  obvious  alternative  is  to  deliberately  restrict  computer  use  to  a 
dedicated  mode  so  that  the  internal  controls  cannot  affect  security. 
There  are  three  common  ways  to  avoid  dependence  on  internal 
controls. 

First,  a  separate  computer  can  be  dedicated  to  each  level  of 
classified  information.  This  is  particularly  attractive  for  an  on-line 
or  real-time  system  where  the  information  must  be  immediately 
accessible.  This  approach  can  lead  to  duplicate  or  inefficiently 
used  computers. 

Second,  each  level  of  classified  information  can  be  scheduled 
to  use  the  computer  for  a  different  time  period.  This  requires  purg¬ 
ing  of  information  from  all  the  system  memory  at  the  end  of  a 
scheduled  period.  This  usually  cumbersome  manual  procedure 
lacks  responsiveness  and  wastes  computer  resources  while  the 
change  in  classification  level  is  completed. 

Third,  various  classification  levels  can  be  processed  together. 
All  communication  lines  must  be  protected,  and  all  the  users  would 
need  to  be  authorized  access  to  all  the  information.  Since  the  inter¬ 
nal  controls  are  not  dependable,  all  output  from  the  system  is  ten¬ 
tatively  classified  at  the  highest  level.  For  information  with  a  lower 
classification,  a  competent  authority  must  manually  review  the 
output  for  contamination  and  downgrade  it  before  releasing  it  at 
the  lower  level. 
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These  use  restrictions  can  support  good  security,  but  they  re¬ 
sult  in  a  substantial  degradation  of  capability  in  a  modern  computer. 

Added  expense.  These  security  restrictions  significantly  add  to 
the  cost.  Additional  communication  security  measures  are  needed, 
and  additional  manpower  is  required  for  the  manual  review  of  out¬ 
put.  There  is  also  the  cost  of  security  clearance  investigations  for 
the  users  whose  information  the  computer  may  contaminate  with 
information  of  a  higher  classification.  Other  costs  include  those  for 
duplicate  equipment  and  for  additional  capacity  to  compensate  for 
wasted  resources.  For  example,  when  one  major  computer  system 
failed  to  deliver  the  promised  multilevel  security,  major  Air  Force 
sites  had  to  clear  many  users  and  make  multimillion  dollar  pur¬ 
chases  of  additional  equipment. 

Increased  risk.  In  practice  the  dedicated  mode  leads  to  a  ma¬ 
jor  increase  in  the  exposure  of  information.  The  lack  of  internal 
controls  effectively  destroys  the  compartmentalization  intended  to 
limit  the  damage  from  subversion.  The  greater  number  of  people 
requiring  clearance  increases  the  chance  of  granting  access  to  an 
untrustworthy  individual.  Manual  purge  procedures  are  prone  to 
errors  that  leave  classified  memory  residues  which  can  be  extracted 
by  unauthorized  users.  Furthermore,  the  manual  review  of  large 
volumes  of  computer  output  may  in  fact  be  a  bureaucratic  ruse  to 
transfer  security  responsibility  (liability)  from  designers  to  users; 
the  reviewer  has  little  chance  of  detecting  unauthorized  classified 
information  that  has  been  accidentally  or  deliberately  included  in 
the  output. 

Foregone  capabilities .  Such  security  restrictions  can  seriously 
limit  the  operational  capability  of  battlefield  support  systems. 
Modern  weapons  demand  command  and  control  systems  with 
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rapid  access  to  a  large  base  of  current  and  accurate  information. 
This  (necessarily  shared  and  integrated)  data  base  will  typically 
contain  information  ranging  from  unclassified  through  top  secret. 
Since  many  people  who  maintain  the  less  classified  information 
have  limited  clearances,  and  the  volume  of  information  requires 
that  computers  be  used,  we  have  the  classical  multilevel  computer 
security  problem.  Internal  computer  controls  are  crucial  to  infor¬ 
mation  protection,  and  avoiding  dependence  on  the  internal  con¬ 
trols  will  seriously  limit  system  capabilities. 

The  problem  is  exacerbated  by  interoperability  with  its  inter¬ 
connected  network  of  computers  with  a  large,  diverse,  and  geo¬ 
graphically  dispersed  user  community.  Command  and  control  sys¬ 
tem  computer  networks  are  a  prime  example.  Yet  one  military 
official  observed  that  because  of  poor  internal  computer  security  in 
one  such  network,  its  35  large-scale,  general  purpose  computers 
would  never  truly  be  used  for  the  purpose  for  which  they  were 
procured.  The  problem  is  even  further  intensified  by  the  growing 
need  for  fusion  of  selected  intelligence  information  (without  com¬ 
promise  of  sensitive  sources)  with  tactical  operations  information. 

In  summary,  the  dedicated  mode  avoids  many  computer  secu¬ 
rity  problems  but  fails  to  meet  the  operational  needs  of  a  modern 
military  force.  These  needs  can  only  be  met  by  effective  multilevel 
protection  in  the  computer  itself. 

apply  adequate  technology 

Developing  and  applying  reliable  internal  computer  security  are 
neither  easy  nor  impossible.  Although  the  need  for  multilevel  op¬ 
eration  is  frequently  recognized,  the  military  has  given  only  lim¬ 
ited  attention  to  developing  the  required  technology.  In  fact,  the 
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Air  Force  recently  directed  termination  of  its  multilevel  security 
development  program,  the  largest  in  the  Department  of  Defense.15 

Before  we  examine  the  technological  progress  that  has  been 
made,  it  should  be  instructive  to  identify  some  of  the  reasoning  that 
surfaced  in  the  recent  Air  Force  termination.  The  pattern  of  thought 
reflects  that  computer  security  is  not  currently  a  major  focus. 

•  The  prospect  of  industry’s  solving  the  computer  security  prob¬ 
lem  is  overestimated  by  concluding  that  industry  has  the  same  se¬ 
curity  problem  as  the  military.  However,  the  communications  anal¬ 
ogy  indicates  a  difficulty.  In  the  civilian  sector,  communication 
security  violations  are  subject  to  legislation,  not  prevention;  wire¬ 
tapping  is  outlawed,  and  there  is  legal  redress  for  loss.  In  contrast, 
the  military  must  resort  to  prevention  (e.g.,  military  approved 
cryptography),  since  we  cannot  sue  the  KGB !  The  computer  situa¬ 
tion  is  similar;  there  are  legislative  thrusts  but  limited  commercial 
success  toward  demonstrably  effective  internal  controls.  The  wait 
for  spontaneous  industry  solutions  is  likely  to  be  a  long  one,  and  it 
is  unlikely  that  they  will  ever  meet  military  security  standards  in 
areas  such  as  protection  from  deliberate  subversion. 

•  Inadequate  research  and  development  (R&D)  funding  was  al¬ 
located  to  continue  one  element  of  the  program  at  an  optimal  level. 
Yet  portions  of  the  program  with  funds  available  were  also  termi¬ 
nated.  Eight  million  dollars  of  work  was  successfully  completed. 
About  $10  million  of  work  over  four  years  remained  to  complete 
development  of  a  full  prototype  and  the  associated  general  basis 
for  competitive  procurement.  Several  estimates  indicate  that  devel¬ 
opment  costs  could  be  recouped  by  avoiding  the  penalties  of  dedi¬ 
cated  mode — not  to  mention  the  increased  security  and  operational 
capability. 
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•  The  threat  is  minimized  by  seeking  counterintelligence  that  is 
practically  unavailable,  e.g.,  actual  examples  of  enemy  agents 
caught  in  the  act.  The  enemy  may  appear  too  ignorant  for  penetra¬ 
tion,  not  interested  in  military  secrets,  or  incapable  of  planned  sub¬ 
version  and  exploitation.  A  single  number  quantification  of  the 
probability  of  threat  can  implicitly  assume  a  random  incident 
rather  than  a  planned  penetration  activity.  This  may  indicate  ac¬ 
ceptable  risk  without  an  objective  criterion  of  acceptability.  These 
perceptions  are  generally  not  based  on  professional  intelligence 
methods  with  “worked  examples”  (e.g.,  from  communication  se¬ 
curity)  of  the  methodology. 

•  Interest  in  developing  solutions  is  limited  by  a  lack  of  clear 
responsibility  for  the  effectiveness  of  internal  controls.  Staff  and 
policy  offices  can  provide  recommendations,  guidance,  and  even 
approvals  for  computer  security  mechanisms  without  responsi¬ 
bility  (liability)  for  any  security  compromise  that  might  result. 
On  the  other  hand,  the  security  test  and  evaluation  efforts  and 
cost-effectiveness  assessments  of  individual  commanders  are 
largely  unrelated  to  the  system’s  real  protection.  This  is  in  marked 
contrast  to  military  communication  security  where  technical  ex¬ 
perts  are  responsible  for  certifying  the  security  mechanisms. 

•  The  computer  security  problem  is  difficult  to  recognize  when 
policy  does  not  clearly  distinguish  the  cases  where  the  computer 
simply  provides  computation  and  where  the  computer  provides  in¬ 
ternal  protection.  Such  policy  focuses  development  on  security 
controls  that  are  “not  necessarily  certifiably  perfect” — a  rather  am¬ 
biguous  goal.  In  such  a  policy  framework  requirements  analysis 
will  not  identify  the  need  for  internal  controls.  In  fact,  a  computer 
may  well  satisfy  all  regulations  and  still  be  highly  vulnerable. 
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•  Confidence  in  weak  controls  grows  from  the  assumption  that 
expending  resources  on  security  will  substantially  improve  secu¬ 
rity.  In  fact,  the  effort  may  be  simply  ineffective,  as  in  the  case  of 
the  penetrate  and  patch  treadmill.  Current  policy  enumerates  com¬ 
puter  design  characteristics  for  internal  security  that  are  neither 
necessary  nor  sufficient  for  security. 

•  Attention  to  security  gimmicks  results  in  overlooking  serious 
weaknesses.  There  are  many  mechanisms  of  minimal  effectiveness 
in  improving  internal  security  controls — handprint  analyzers,  en¬ 
cryption  of  internal  data,  read-only  memory  for  security  informa¬ 
tion,  etc.  Some  guidance  has  encouraged  computer  programs  that 
sort  out  and  label  products  by  security  level.  Evaluation  of  these 
programs  focuses  on  expected  results  with  friendly  users  rather 
than  on  deliberate  subversion  of  the  programs  or  penetration  of  the 
underlying  system.  Pursuing  such  scattered  efforts  is  frequently 
worse  than  doing  nothing  at  all,  since  it  gives  a  dangerous  false 
sense  of  security. 

These  sorts  of  issues  caused  the  Air  Force  to  characterize  its 
Electronic  Systems  Division’s  (recently  terminated)  development 
program  as  “controversial.”  But  our  previous  examination  of  the 
problem  makes  it  clear  that  multilevel  operation  without  adequate 
technology  is  a  high  stakes  gamble.  Most  charitably,  it  is  strangely 
inconsistent  with  established  standards  in  other  areas  (e.g.,  commu¬ 
nications)  of  military  security  that  hypothesize  a  deliberate,  compe¬ 
tent,  and  motivated  hostile  threat  and  respond  with  effective  coun¬ 
termeasures.  More  likely  it  nullifies  all  other  security  measures, 
allowing  damage  limited  only  by  the  imagination  of  the  enemy. 
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Security  Kernel 
Technology 

Fortunately,  military  R&D — in  particular  the  recently  termi¬ 
nated  Air  Force  program,16 — has  made  substantial  progress  toward 
adequate  technology  for  multilevel  security.  A  major  step  toward 
solution  was  the  introduction  in  1972  of  the  security  kernel17  tech¬ 
nology,  which  provided  a  scientific  foundation  for  demonstrably 
effective  internal  security  controls.  Although  an  explanation  of  the 
technical  details  is  well  beyond  the  scope  of  this  article,  one  techni¬ 
cal  report  summarizes  the  kernel  approach  this  way: 

The  approach  to  obtaining  a  secure  system  involves  first  defining 
the  security  requirements  and  then  creating  a  conceptual  design  that 
can  be  shown  to  provide  the  required  protection  (i.e.,  a  model).  The 
model  formally  defines  an  ideal  system  (in  our  case  one  that  com¬ 
plies  with  military  security  requirements),  and  provides  a  basis  for 
testing  a  subsequent  implementation.  Once  a  [security  kernel]  that 
meets  the  requirements  previously  described  has  been  implemented, 
computer  security  has  been  achieved.  Of  the  software  in  the  system, 
only  the  security  kernel .  .  .  need  be  correct.  .  .  .  The  operating  sys¬ 
tem  proper  and/or  the  application  software  can  contain  inadver¬ 
tently  introduced  bugs  or  maliciously  planted  trap  doors  without 
compromising  security. 18 

Under  the  Air  Force  program  the  security  kernel  demonstrated 
its  technical  feasibility,  independent  of  any  particular  computer 
vendor  or  security  policy.  The  kernel  has  also  largely  established 
its  operational  acceptability,  with  specific  evidence  for  broad  func¬ 
tionality,  good  efficiency,  security  certifiability,  and  supportability. 
In  addition,  the  underlying  technical  requirements  of  the  kernel 
have  been  successfully  incorporated  into  military  procurement 
specifications  for  both  a  commercial  large-scale  computer  and  an 
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embedded  weapon  system  computer.  In  short,  the  basic  technology 
is  well  in  hand. 

scientific  foundation 

A  security  kernel  is  a  small  set  of  computer  program  instructions 
and  associated  hardware  that  controls  all  access  by  users  (viz., 
through  their  programs)  to  information.  A  given  security  kernel  is 
usually  unique  to  a  particular  computer.  A  security  kernel  for  com¬ 
puters  is  in  many  ways  conceptually  analogous  to  a  cryptographic 
device  for  communications. 

Security  kernel  design  is  derived  directly  from  a  precise  spec¬ 
ification  (viz.,  a  mathematical  model)  of  its  function.  (The  kernel 
model  is  analogous  to  the  algorithm  that  defines  the  mathematical 
function  of  a  cryptographic  device.)  This  mathematical  model  is  a 
precise  formulation  of  access  rules  based  on  user  attributes  (clear¬ 
ance,  need  to  know)  and  information  attributes  (classification). 
System  parameters  control  an  installation’s  specific  use  (e.g.,  for 
the  DOD  classification  policy,  privacy  protection,  etc.). 

The  chief  distinguishing  characteristic  (from  whence  its  name) 
of  the  security  kernel  concept  is  that  a  kernel  represents  a  distinct 
internal  security  perimeter.  In  particular,  that  portion  of  the  system 
responsible  for  maintaining  internal  security  is  reduced  from  es¬ 
sentially  the  entire  computer  to  principally  the  kernel.  Thus  the 
kernel  is  analogous  to  a  cryptographic  device  that  removes  most  of 
a  communication  path  from  security  consideration.  To  be  a  bit 
more  technical  and  concrete,  a  typical  security  kernel  has  several 
(say  ten  to  twenty)  small  computer  programs  (viz.,  subroutines) 
that  can  be  invoked  by  other  programs  (e.g.,  the  operating  system 
and  individual  user  application  programs).  The  kernel,  and  only 
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the  kernel,  controls  and  manages  all  the  hardware  components  that 
store  and  access  information.  All  other  (viz.,  nonkernel)  programs 
must  invoke  the  kernel  (i.e.,  call  on  its  subroutines)  in  order  to  ac¬ 
cess  information — the  kernel  checks  the  user  and  information  at¬ 
tributes  and  provides  only  access  that  is  authorized.  Yet,  in  spite  of 
these  checks,  there  is  minimal  user  impact.  Figure  1  conceptually 
illustrates  this  structure. 


J  security-related  elements 


Figure  1.  Secure  computer  system 

The  technical  breakthrough  was  the  discovery  of  a  set  of 
model  functions  and  conditions  that  are  provably  sufficient  to  pre¬ 
vent  compromise  for  all  possible  nonkernel  computer  programs. 
Each  function  of  the  model  determines  the  design  for  a  kernel  pro¬ 
gram.  In  addition,  the  model  imposes  security  conditions  that  must 
be  met  by  the  design.  Security  theorems  have  been  proved  showing 
that  (since  the  kernel  precisely  follows  the  model)  the  kernel  will 
not  permit  a  compromise,  regardless  of  what  program  uses  it  or 
how  it  is  used.  That  is,  the  kernel  design  is  penetration-proof — in 
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particular  to  all  those  clever  attacks  that  the  kernel  designers  never 
contemplated. 

This  foundation  of  mathematical  completeness  raises  the  ker¬ 
nel  design  and  evaluation  process  above  a  mere  game  of  wits  with 
an  attacker;  this  is  analogous  to  information  theory  as  a  foundation 
for  modern  cryptanalysis.  A  dramatic  effect  is  that  the  kernel  fa¬ 
cilitates  objective  evaluation  of  internal  security.  The  evaluator 
need  not  examine  the  nearly  endless  number  of  possible  penetra¬ 
tion  attempts;  he  need  only  verify  that  the  mathematical  model  is 
correctly  implemented  by  the  kernel.  In  other  words,  the  kernel 
provides  the  verifiably  reliable  internal  controls  needed  for  multi¬ 
level  security. 

engineering  feasibility 

To  be  useful  the  kernel  concept  must  be  not  only  mathematically 
sound  but  also  feasible  to  implement.  Successful  implementation 
is  based  on  three  engineering  principles: 

Completeness.  A  security  kernel  must  be  invoked  on  every  ac¬ 
cess  to  data  in  the  computer. 

Isolation.  A  security  kernel  and  its  data  base  must  be  protected 
from  unauthorized  modification. 

Verifiability.  A  security  kernel  must  be  sufficiently  small  and 
simple  that  its  function  can  be  completely  tested  and  verified. 

A  laboratory  security  kernel  for  a  commercial  minicomputer 
(Digital  Equipment  Corporation  model  PDP- 11/45)  showed  feasi¬ 
bility  in  1974.  The  “virtual  memory”  hardware  of  this  computer 
was  a  significant  aid  in  ensuring  the  completeness  and  isolation  of 
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the  kernel.  This  running  kernel  consisted  of  only  about  1000  com¬ 
puter  instructions.  The  experiment  also  established  that  it  is  much 
easier  to  introduce  the  kernel  concept  into  an  initial  design  than  it 
is  to  retrofit  it  later. 

The  basis  for  the  design  (viz.,  kernel  model)  was  mathemati¬ 
cally  verified.  As  with  cryptographic  devices,  verification  of  the 
corresponding  implementation  was  based  more  on  careful  engi¬ 
neering  and  extensive  testing  than  on  formal  mathematics.  Auto¬ 
mated  testing  and  program  verification  techniques  indicated  that 
the  kernel  implementation  corresponded  to  the  design.  This  labo¬ 
ratory  prototype  confirmed  feasibility  but  was  not  oriented  toward 
performance  and  efficiency  evaluation.  In  passing,  it  is  interesting 
to  note  that  a  tiger  team  tried  and  failed  to  penetrate  its  security. 

performance 

Performance  was  examined  on  a  larger  computer  system.  Negli¬ 
gible  performance  degradation  (less  than  1  percent)  was  experi¬ 
enced  when  the  commercial  Multics  (for  the  Honeywell  6000  line) 
was  modified  to  the  kernel  model.  This  Multics  version  was  not 
implemented  as  a  true  kernel,  i.e.,  the  controls  were  distributed 
rather  than  collected  into  a  small,  verifiable  entity;  however,  this 
version  made  all  the  security  checks  required  in  a  kernel  and  thus 
confirmed  that  the  kernel  was  not  inherently  inefficient. 

The  good  security  features  of  the  kernel  hardware  were  a  ma¬ 
jor  aid  to  performance,  and  these  features  are  vendor-independent. 
The  version  was  so  successful  that  Honeywell  included  the  result¬ 
ing  Access  Isolation  Mechanism  in  commercial  Multics  offerings 
for  protection  of  privacy  and  business  information.  This  system 
was  used  as  the  foundation  for  the  terminated  Air  Force  prototype; 
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the  prototype  development  was  implementing  a  true,  verifiable 
kernel. 

functionality 

A  security  kernel  forces  the  computer  user  to  be  security-conscious 
but  does  not  seriously  degrade  the  capabilities  of  the  computer. 
This  was  clearly  demonstrated  when  the  Multics  modifications 
were  successfully  installed  for  those  demanding  users  in  the  Pen¬ 
tagon:  the  constraints  of  the  kernel  design  had  minimal  adverse 
impact  on  the  users.  Just  as  cryptography  allows  the  secure  use  of 
standard  commercial  communication  equipment,  the  kernel  con¬ 
cept  allows  the  secure  use  of  standard  commercial  computer  equip¬ 
ment  and  programs.  The  Pentagon  facility  with  its  classified  pro¬ 
cessing  confirmed  the  concepts  for  supporting  a  kernel-based 
computer  in  a  total  system  security  context. 

Operational  utility  of  the  kernel  was  further  demonstrated 
with  the  initial  minicomputer  prototype.  A  demonstration  showed 
the  secure  interface  of  operations  and  intelligence  systems  for  fu¬ 
sion  of  tactical  battlefield  information.  In  addition,  several  military 
R&D  efforts  in  various  stages  of  completion  have  used  major  ele¬ 
ments  of  the  security  kernel  technology:  a  command  and  control 
network,  a  cryptographic  controller,  a  nation-wide  digital  commu¬ 
nication  system,  a  large-scale  “virtual  machine  monitor”  system,  a 
general-purpose  minicomputer  operating  system,  and  a  secure 
militarized  minicomputer  (based  on  the  commercial  Honeywell 
Level  6).  Although  they  confirm  the  utility  of  the  security  kernel, 
none  of  these  R&D  efforts  will  lead  to  availability  and  operational 
use  on  a  general  basis. 
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security  policy 

Although  the  security  kernel  concept  is  not  at  odds  with  current 
policy,  future  policy  must  recognize  and  take  advantage  of  kernel 
characteristics.  Policy  should  recognize  that  the  mathematical 
model  provides  a  way  to  translate  paper  and  pencil  security  rules 
into  computer  terms.  In  addition,  a  meaningful  policy  for  multi¬ 
level  mode  would  reflect  the  technological  realities:  either  the  en¬ 
tire  system  must  be  correct  (not  currently  feasible)  or  else  the  se¬ 
curity  kernel  must  be  used. 

As  with  cryptographic  devices,  the  kernel  must  be  protected 
against  subversion  (e.g.,  insertion  of  a  trap  door)  during  its  devel¬ 
opment.  But  protecting  the  kernel  certainly  involves  far  fewer  peo¬ 
ple  and  a  much  more  controlled  environment  than  trying  to  protect 
all  the  computer  programs  of  the  system;  thus,  in  contrast  to  con¬ 
temporary  systems,  the  kernel  makes  it  tractable  to  protect  against 
subversion.  Furthermore,  the  evaluation  (for  certification)  of  inter¬ 
nal  computer  security  controls  is  a  difficult  technical  task.  The  ker¬ 
nel  approach  to  design  and  implementation  makes  such  certifica¬ 
tion  feasible,  but  this  evaluation  still  requires  highly  capable 
technical  experts — just  as  does  the  evaluation  of  cryptographic 
devices. 

This  approach  conceptually  parallels  modern  military  cryp¬ 
tography.  (See  Table  II.)  Yet,  development  must  be  resumed  and 
policy  adjustments  made  if  it  is  to  be  available  on  a  general  basis 
at  any  time  in  the  immediate  future.  To  be  sure,  there  are  compet¬ 
ing  demands  for  resources.  Development  of  directly  employable 
weapons  (such  as  fighters)  may  always  have  higher  priority  than 
development  of  computer  security,  but  as  one  observer  put  it:  “How 
effective  would  those  fighters  be  if  plans  for  their  employment 
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were  known  in  advance  by  an  adversary  who  had  penetrated  the 
computer  containing  those  plans?”19  The  security  kernel  is  clearly 
the  only  currently  available  technology  that  can  provide  the  secu¬ 
rity  and  operational  capabilities  we  must  have. 

Table  II.  Commonality  in  security  technology 


Cryptographic 

Security 

Mechanism 

Kernel 

threats  negated . 

rather  than  outlawed 

.  wiretapping 

penetration 

standard  commercial . 

.  communications 

computers  and 

elements  preserved 

circuits 

programs 

security  sensitive . 

.  principally 

principally 

portions  limited 

the  crypto 

the  kernel 

underlying  basis . 

.  cryptographic 

mathematical 

precisely  formulated 

algorithm 

model 

design  evaluation . 

.  information 

security 

criteria  definitized 

theory 

theorems 

implementation  exactly . 

.  methodical 

verified 

meeting  design 

engineering 

programs 

subversion  controlled . 

by  physical  security 

.  manufacturing 

programming 

skilled  experts  needed . 

.  cryptanalysts 

computer 

for  certification 

and  engineers 

scientists 

Security  often  requires  subjective  judgments,  and  some  may 
differ  with  the  author  on  specific  points.  On  balance  it  appears 
evident  that  a  user  who  puts  blind  trust  in  the  protection  provided 
by  computers  for  sensitive  military  information  will  seriously  en¬ 
danger  security.  In  fact,  most  computers  do  not  even  include  nom- 
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inal  features  to  support  a  military  security  system.  Even  when  they 
do,  the  essence  of  the  computer  security  problem  is  the  technical 
efficacy  of  internal  controls,  and  the  evidence  is  clear  that  most 
internal  controls  are  not  dependable. 

On  the  other  hand,  limiting  computer  use  in  order  to  avoid  this 
problem  is  expensive  and  deprives  us  of  vital  operational  capabil¬ 
ity.  The  effectiveness  versus  efficiency  dilemma  generates  pres¬ 
sure  for  underestimating  the  threat  and  overconfidence  in  internal 
security  controls.  Unfortunately,  these  pressures  have  led  the  Air 
Force  into  a  disturbing  and  increasing  dependency  on  weak  secu¬ 
rity  controls  even  in  the  absence  of  evidence  of  effectiveness. 

The  Air  Force  recently  terminated  the  single  major  DOD  pro¬ 
gram  for  providing  practical  and  scientifically  sound  internal  con¬ 
trols — controls  based  on  the  security  kernel  concept.  Past  develop¬ 
ment  has  clearly  demonstrated  the  feasibility,  performance,  and 
utility  of  this  technology.  However,  because  of  lack  of  both  a  tech¬ 
nical  understanding  and  a  meaningful  policy,  there  is  currently 
little  official  support  for  development  of  this  promising  capability. 

Three  basic  actions  must  be  taken  to  control  the  adverse  im¬ 
pact  of  our  computer  security  weakness: 

•  Promulgate  a  clear  policy  that  distinguishes  between  depen¬ 
dence  on  external  controls  (dedicated  mode)  and  internal  controls 
(multilevel  mode).  It  should  not  be  possible  to  satisfy  the  policy 
without  genuinely  providing  security.  Multilevel  mode  without  a 
technically  sound  basis  should  be  expressly  prohibited. 

•  Incorporate  explicit  military  security  controls  in  classified  pro¬ 
cessing  systems.  These  must  be  based  on  a  precise  specification  of 
the  required  functions  (as  in  the  kernel  model  for  the  Pentagon 
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Multics).  This  step  is  crucial  to  future  introduction  of  multilevel 
security  without  complete  system  redesign.  (In  the  interim  this  can 
also  aid  in  the  protection  of  privacy  and  valuable  resources.) 

•  Resume  security  kernel  development  to  provide  technically 
sound  multilevel  security.  As  in  the  previous  Air  Force  program, 
this  should  be  oriented  toward  the  competitive  military  acquisition 
process.  Concurrently,  policy  must  be  changed  to  facilitate  opera¬ 
tional  use  of  the  kernel  technology. 

It  is  not  easy  to  make  a  computer  system  secure,  but  neither  is  it 
impossible.  The  greatest  error  is  to  ignore  the  problem — a  fatal 
mistake  which  obviously  allows  available  solutions  to  remain  un¬ 
used.  Failure  in  this  one  critical  area  introduces  an  Achilles’  heel 
into  our  battlefield  support  systems — the  cornerstone  of  the  mod¬ 
ern  electronic  Air  Force. 

Naval  Postgraduate  School 
Monterey,  California 
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US  Defense  Politics:  The  Origins  of  Security  Policy  by  Harvey  M. 

Sapolsky,  Eugene  Gholz,  and  Caitlin  Talmadge.  Routledge  (http:// 

www.routledge.com),  270  Madison  Avenue,  New  York,  New  York 

10016,  2009,  191  pages,  $178.00  (hardcover),  ISBN  978-0-415-77265-5; 

2009,  191  pages,  $44.95  (softcover),  ISBN  978-0-415-77266-2. 

In  US  Defense  Politics,  Prof.  Harvey  Sapolsky  of  MIT,  Prof.  Eugene 
Gholz  of  the  LBJ  School  of  Public  Affairs  at  the  University  of  Texas- 
Austin,  and  PhD  candidate  Caitlin  Talmadge  of  MIT  provide  a  detailed 
look  into  politics  affecting  our  national  defense.  The  authors  offer  a 
brief  history  lesson  on  the  military  before  addressing  four  questions 
characteristic  of  US  policy  making:  "(1)  What  shall  be  the  division  be¬ 
tween  public  and  private  responsibilities  in  each  particular  policy 
area?  (2)  What  shall  be  the  division  between  planning  and  the  market? 
(3)  What  is  to  be  centralized  and  what  is  to  be  decentralized  in  each 
policy  area?  (4)  And  what  questions  should  be  settled  by  experts,  on 
technocratic  grounds,  and  what  should  be  settled  by  political  means, 
representing  the  will  of  the  people?”  (p.  8). 

Sapolsky,  Gholz,  and  Talmadge  express  a  need  for  blending  private 
and  public  responsibilities  in  a  manner  that  benefits  both  the  govern¬ 
ment  and  its  citizens.  For  example,  though  specifically  designed  for  the 
military,  the  Global  Positioning  System  has  proven  even  more  useful 
to  civilians.  The  authors  argue  that  more  such  mutually  beneficial  ac¬ 
quisitions  would  ease  any  political  turmoil  with  regard  to  the  neces¬ 
sary  research  and  development. 

As  for  planning  and  the  market,  US  Defense  Politics  examines  a  free- 
market  approach  to  US  defense,  pointing  out,  for  instance,  objections 
raised  by  the  other  military  services  to  the  Air  Force's  desire  to  control 
the  development  of  remotely  piloted  aircraft  (RPA).  The  authors  indi¬ 
cate  that  such  a  stranglehold  on  the  RPA  market  adversely  affects  the 
mission  due  to  a  lack  of  competition.  Instead,  "[RPA]  development 
across  multiple  services  would  be  more  conducive  to  innovation  and 
would  create  a  more  diverse  set  of  capabilities  for  the  future”  (p.  160). 
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Addressing  the  question  of  centralization  and  decentralization  within 
the  defense  structure,  the  authors  note  that  in  times  of  conflict,  cen¬ 
tralization  is  paramount,  insofar  as  two  power  pyramids  exist:  the  mili¬ 
tary,  acting  as  an  adviser,  and  civilians,  implementing  policy.  Having 
each  power  in  a  defined  role  allows  top  leadership  to  effectively  carry 
out  the  mission  of  defending  our  nation.  Decentralization,  however, 
“encourages  the  development  and  presentation  of  new  ideas,  but  it 
does  not  encourage  the  implementation  of  any”  (p.  163).  Ultimately, 
after  the  military  branches  compete  with  each  other,  civilian  leader¬ 
ship  considers  their  ideas  and  then  decides  which  path  to  choose, 
thus  reaffirming  the  need  for  centralization:  "What  is  unproductive  is 
to  divide  the  DOD  up  into  civilian  versus  military  camps,  between  an 
administration-dominated  corps  on  the  one  hand  and  the  permanent 
bureaucracy  on  the  other”  (p.  164). 

Lastly,  the  book  points  out  that  determining  whether  to  have  experts 
or  politicians  settle  certain  questions  actually  involves  a  balance  of 
power.  For  example,  whereas  defense  experts  argue  the  need  for  stur¬ 
dier  tanks,  faster  aircraft,  or  larger  ships,  politicians  realize  that  other 
initiatives,  such  as  providing  medical  service  for  military  family  mem¬ 
bers,  would  have  a  more  productive  effect  on  the  overall  capability  of 
national  defense.  Consequently,  in  this  instance,  authorizing  less  ex¬ 
pensive  fifth-generation  tanks,  aircraft,  or  ships  allows  for  a  stronger 
all-volunteer  force. 

Emphasizing  the  importance  of  maintaining  harmony  between  the 
civilian  and  military  arenas  as  a  factor  in  defense  politics,  the  authors 
single  out  Robert  McNamara  as  one  of  the  worst  secretaries  of  defense 
in  history.  One  need  only  examine  statements  by  the  former  secretary 
to  discover  a  lack  of  this  desired  cohesiveness:  “I  see  my  position  here 
as  being  that  of  a  leader,  not  a  judge.  1  am  here  to  originate  and  stimu¬ 
late  new  ideas  and  programs,  not  just  to  referee  arguments  and  harmo¬ 
nize  interests”  (p.  100). 

Regrettably,  the  book  does  have  its  flaws.  Take,  for  example,  the  sec¬ 
tion  on  President  George  W.  Bush,  the  Iraq  war,  and  weapons  of  mass 
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destruction  (WMD):  "No  WMD  were  found,  not  even  a  warehouse  or 
two  full  of  chemical  shells,  which  nearly  every  intelligence  around  the 
world  had  believed  existed”  (p.  143).  Since  this  book  is  about  defense 
politics,  the  authors  should  have  examined  more  carefully  the  back¬ 
ground  of  intelligence  reports.  Even  though  intelligence  agencies  con¬ 
tinuously  reported  the  lack  of  evidence  necessary  to  provide  legal 
grounds  for  an  invasion  of  Iraq,  politicians  in  Washington  pressured 
the  analysts  into  producing  vague  reports  that  one  could  read  either 
way.  After  all,  in  some  cases,  such  as  this  one,  politicians  interpret  in¬ 
telligence  reports  as  they  see  fit  and  then  create  policies. 

All  things  considered,  US  Defense  Politics  is  relevant  and  worthwhile 
for  the  Air  Force  community.  Specifically,  I  recommend  it  to  all  senior 
noncommissioned  officers  and  junior  officers  as  well  as  to  other  service 
members  who  desire  a  fundamental  understanding  of  how  politics  af¬ 
fects  the  military.  The  fact  that  each  of  the  12  chapters  includes  ques¬ 
tions  for  discussion  and  recommendations  for  additional  reading  makes 
it  a  valuable  tool  for  mentors  who  are  developing  the  leaders  of  tomorrow. 

SSgt  Justin  N.  Theriot,  USAF 

Incirlik  AB,  Turkey 


Structured  Analytic  Techniques  for  Intelligence  Analysis  by 

Richards  J.  Heuer  Jr.  and  Randolph  H.  Pherson.  CQ_ Press  (http:// 
www.cqpress.com),  2300  N  Street,  NW,  Suite  800,  Washington,  DC 
20037,  2010,  343  pages,  $52.95  (softcover),  ISBN  978-1-60871-018-8. 

Richards  J.  Heuer  Jr.  and  Randolph  H.  Pherson  have  produced  a 
"how-to”  guide  for  your  brain.  Having  previously  written  about  the 
mental  pitfalls  encountered  during  intelligence  analysis,  they  have 
done  the  community  a  great  service  by  providing  a  guidebook  on  how 
to  mitigate  such  faulty  intellectual  thinking.  (The  intelligence  commu¬ 
nity  recognizes  Heuer  in  particular  as  an  expert  in  metacognition,  or 
"thinking  about  thinking.”)  An  essential  element  to  any  analyst's  tool 
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kit,  this  study  should  prove  valuable  to  people  involved  in  the  decision¬ 
making  process. 

Structured  Analytic  Techniques  for  Intelligence  Analysis  is  not  a  text¬ 
book  on  intelligence,  the  analytical  process,  or  obstacles  to  effective, 
unbiased  thinking.  Furthermore,  although  Heuer  and  Pherson  do  walk 
the  reader  through  the  eight  phases  of  analytical  thought,  it  is  not  a 
checklist  that  one  must  follow  rigidly  from  start  to  finish.  Rather,  this 
book  serves  as  a  guide  through  the  process,  providing  analysts  a  num¬ 
ber  of  different  options  they  can  employ  at  their  discretion  to  improve 
their  end  product.  For  each  phase  of  the  analytical  process,  analysts 
will  find  a  number  of  valuable  techniques  that  will  allow  them  to  con¬ 
duct  multiple  approaches  to  each  problem  set,  either  individually  or 
with  the  assistance  of  other  analysts. 

The  book  emphasizes  analytical  thought,  which  the  authors  proclaim 
central  to  good  analysis.  Heuer  and  Pherson  argue  that  analysts  should 
encourage  the  effective  usage  of  these  techniques  by  integrating  them 
into  daily  thinking,  allowing  analysts  to  become  familiar  with  ways  of 
applying  them.  Additionally,  the  book  examines  the  manner  in  which 
structured  analysis  can  best  support  the  distributed  nature  of  the  intel¬ 
ligence  community,  which  relies  on  the  collaboration  of  analysis  from 
disparate  organizations— geographically  separated  and  dependent 
upon  a  shared  understanding  of  the  thinking  process  employed.  Struc¬ 
tured  analysis  not  only  overcomes  an  analyst’s  obstacles  to  clear 
thought  but  also  offers  a  transparent  format  to  explain  the  thought  pro¬ 
cess  to  others. 

Heuer  and  Pherson  supply  50  different  techniques  for  structured 
analysis  but  do  not  suggest  using  all  of  them  in  every  effort.  Instead, 
analysts  should  choose  the  most  appropriate  one  for  the  given  situa¬ 
tion,  taking  care  not  to  limit  themselves  to  one  or  two  "go-to”  tech¬ 
niques.  The  authors  warn  that  analysts  should  not  become  too  com¬ 
fortable  with  any  selection  of  techniques,  recommending  that  they 
continuously  push  the  boundaries  of  their  cognitive  processes  to  avoid 
mental  shortcuts  that  might  lead  to  false  assumptions  and  flawed 
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thinking.  However,  they  do  recommend  a  handful  of  “core  techniques” 
with  which  analysts  should  become  familiar  due  to  their  frequency  of 
use  and  applicability  to  a  wide  range  of  intelligence  problem  sets. 
These  procedures  equip  novices  with  a  good  starting  point  from  which 
they  can  then  begin  to  integrate  other  techniques.  The  more  varied 
the  techniques  employed,  the  higher  the  thought  processes  attained. 
Although  the  authors  organize  the  techniques  into  eight  phases  of 
analysis,  a  number  of  them  overlap  these  categories  because  of  their 
effectiveness  in  multiple  functions. 

Heuer  and  Pherson  carefully  explain  their  methodology  for  choosing 
techniques,  highlighting  their  criteria  for  selecting  each  one  and  al¬ 
ways  maintaining  that  no  single  technique  is  necessarily  better  than 
another.  Analysts  should  use  each  one  to  tackle  a  particular  problem 
set.  The  authors  also  include  12  questions  to  help  analysts  decide  upon 
the  most  appropriate  technique(s)  for  their  project. 

Recognizing  that  all  analysis  should  be  subject  to  review,  Heuer  and 
Pherson  submit  their  own  thesis— the  value  of  structured  analytic 
technique— for  critique  as  well.  In  chapter  13,  they  lay  out  the  differ¬ 
ent  ways  (though  never  promoting  one  technique  specifically)  by 
which  one  can  judge  the  improved  effectiveness  produced  by  their  rec¬ 
ommendations.  They  also  propose  that  the  intelligence  community  as 
a  whole  establish  a  formal  process  for  evaluating  such  techniques  to 
ensure  that  the  community  continues  to  grow  and  refine  its  thinking 
processes  rather  than  rely  on  any  one  source,  including  this  book. 

The  study’s  format  makes  the  book  quite  easy  to  use.  A  flowchart  on 
the  back  cover  walks  the  analyst  through  the  eight  phases  of  problem 
solving  and  lists  likely  techniques  for  use.  The  aforementioned  12  ques¬ 
tions  also  help  analysts  seek  out  the  best  ones  for  employment.  For 
each  of  the  50  techniques,  the  authors  include  a  brief  summary,  an  ex¬ 
planation  of  how  to  use  it  to  best  effect,  its  value,  and  methods  for  ap¬ 
plying  it,  as  well  as  examples  of  the  technique  in  use  and  an  explanation 
of  how  each  one  relates  to  the  others  and  their  original  sources.  In  this 
fashion,  analysts  can  carefully  make  their  choice,  based  on  the  problem 
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at  hand,  or  if  they  are  already  familiar  with  the  techniques,  they  can 
simply  skip  to  the  most  appropriate  one  and  review  its  methodology. 

Structured  Analytic  Techniques  for  Intelligence  Analysis  would  prove 
most  suitable  as  an  in-class  reference  for  a  course  on  intelligence  analy¬ 
sis  or  as  an  excellent  resource  for  individuals  who  have  completed 
such  a  class.  Granted,  an  analyst  could  learn  these  techniques  by  read¬ 
ing  the  book,  but  they  are  best  incorporated  through  hands-on  train¬ 
ing.  Although  intelligence  analysts  will  benefit  most  from  this  work, 
anyone  involved  in  the  decision-making  process— especially  those  who 
must  leverage  intelligence  to  execute  their  operations— will  find  it  of 
incredible  utility. 

Lt  Col  Stephen  C.  Price,  USAF 

Stuttgart,  Germany 

Teaching  Strategy:  Challenge  and  Response  edited  by  Gabriel  Marcella. 
Strategic  Studies  Institute  (http://www.strategicstudiesinstitute 
.army.mil/),  US  Army  War  College,  632  Wright  Avenue,  Carlisle, 
Pennsylvania  17013-5244,  2010,  354  pages,  ISBN  978-1-58487-430-0. 
Available  free  at  http://www.strategicstudiesinstitute.army.mil/pdf 
hles/PUB976.pdf. 

Teaching  Strategy:  Challenge  and  Response  is  itself  a  response  to  the 
debate  about  the  teaching  of  strategy,  addressing  the  topic  from  differ¬ 
ent  angles,  especially  as  it  applies  to  professional  military  education. 
The  book  contains  11  chapters  by  authors  well  qualified  to  write  about 
teaching  strategy.  In  the  introduction,  Robert  H.  Dorff  notes  that  the 
collection  of  essays  continues  discourse  of  the  past  five  years  about 
how  to  improve  education  in  strategy  at  military  academic  institutions. 
He  also  points  out  that  the  war  in  Iraq,  in  which  execution  left  some¬ 
thing  to  be  desired,  reflected  some  shortcomings  in  strategy.  Dorff 
concludes  by  mentioning  the  existence  of  several  signs  of  an  inability 
to  create  good  strategy  but  does  not  pursue  the  origins  of  this  problem. 
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Although  the  book  is  a  product  of  the  defense  establishment,  the 
contributors  do  not  hesitate  to  air  out  their  concerns  about  weaknesses 
in  strategy  education  and  discuss  how  the  general  population  and  aca¬ 
demia  misunderstand  strategy.  Thus,  this  collection  would  appeal  not 
only  to  members  of  both  the  armed  forces  and  the  professional  educa¬ 
tion  system  but  also  to  politicians  and  the  general  public.  Several  chap¬ 
ters  offer  commentary  on  strategic  thinking  that  would  interest  any¬ 
one  involved  in  national  security  or  military  matters:  Robert  Kennedy, 
"The  Elements  of  Strategic  Thinking:  A  Practical  Guide”;  Thomaz 
Guedes  da  Costa,  "The  Teaching  of  Strategy:  Lykke’s  Balance,  Schelling's 
Exploitation,  and  a  Community  of  Practice  in  Strategic  Thinking”; 
Volker  Franke,  "Making  Sense  of  Chaos:  Teaching  Strategy  Using  Case 
Studies”;  and  Christopher  R.  Paparone,  "Beyond  Ends-Based  Rationality: 
A  Quad-Conceptual  View  of  Strategic  Reasoning  for  Professional  Mili¬ 
tary  Education.”  These  contributions  distinguish  themselves  by  turn¬ 
ing  their  full  attention  to  the  subject  at  hand  rather  than  dwelling  on 
tangential  matters  such  as  internal  issues  in  the  professional  military 
education  system,  as  do  some  of  the  other  contributions.  All  of  the  es¬ 
says,  however,  raise  our  understanding  of  strategy  by  defining  it  and 
exemplifying  how  it  plays  a  role  in  different  political,  military,  and 
geopolitical  settings.  Several  authors  address  the  inability  of  the  mod¬ 
ern  state  to  formulate,  explain,  and  execute  strategy. 

Bradford  A.  Lee's  chapter,  "Teaching  Strategy:  A  Scenic  View  from 
Newport”  (pp.  105-48),  an  examination  of  several  interesting  balancing 
acts,  deserves  special  mention.  Lee  questions  whether  the  teaching  of 
classical  strategy,  such  as  that  associated  with  the  Peloponnesian  War 
and  the  Athenian  expedition  to  Sicily,  allows  today's  officers  to  apply 
this  ancient  wisdom  to  modern  warfare.  Do  officers  need  more  expo¬ 
sure  to  what  Germans  call  Bildung,  the  intellectual  self-cultivation  of 
civic  values  and  the  riches  of  our  civilization?  Does  this  intellectual 
enhancement  make  battlefield  commanders  better  able  to  save  Ameri¬ 
can  lives,  protect  freedom,  and  end  a  conflict?  Or  is  this  classical  edu¬ 
cation  and  theorizing  strategy  just  mind  noise?  Like  other  contributors, 
Lee  seems  slightly  pessimistic  about  the  political  ability  to  formulate  a 
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clear  and  concise  strategy  to  win  a  war  or  a  conflict.  In  the  absence  of 
a  national  grand  strategy,  how  can  we  expect  service  leaders  to  pro¬ 
duce  a  successful  military  strategy?  Lee  also  discusses  practical  ques¬ 
tions  such  as  ways  of  attracting  and  retaining  suitable  faculty  members. 

In  chapter  eight,  "The  Teaching  of  Strategy,"  mentioned  above, 
Thomaz  Guedes  da  Costa  writes  about  the  strategist  as  a  synthesizer 
instead  of  an  analyst,  a  planner,  and  a  manager.  His  discussion  of  ex¬ 
ploiting  the  situation  (pp.  219-22),  an  especially  important  contribu¬ 
tion  to  the  volume,  draws  on  the  work  of  B.  H.  Liddell  Hart,  Edward 
Luttwak,  and  Thomas  Schelling  by  pointing  out  the  value  of  utilizing 
strategic  thinking  as  a  tool  set  and  providing  guidance  to  exploit  an  op¬ 
portunity  as  a  means  of  ensuring  the  best  possible  outcome. 

The  contributors  to  Teaching  Strategy  not  only  have  much  to  say  about 
strategy  to  the  Air  Force  community  or  anyone  interested  in  the  topic, 
but  also  identify  a  wealth  of  excellent  sources  for  future  reference  in 
the  endnotes  to  their  essays.  In  short,  the  book  is  well  worth  reading. 

Jan  Kallberg,  PhD 

Richardson,  Texas 


Guiding  Principles  for  Stabilization  and  Reconstruction  by  the 

United  States  Institute  of  Peace  and  the  United  States  Army  Peace¬ 
keeping  and  Stability  Operations  Institute.  United  States  Institute  of 
Peace  Press  (http://www.usip.org/publications-tools),  1200  17th 
Street  NW,  Washington,  DC  20036-3011,  2009,  244  pages,  $16.00 
(softcover),  ISBN  978-1-60127-033-7. 

A  particular  genre  of  military  guides  related  to  low  intensity  conflict, 
stabilization,  reconstruction,  and  counterinsurgency  operations  has  be¬ 
come  extremely  popular  in  the  media  and  military  circles  recently  due 
to  the  wars  in  Iraq  and  Afghanistan.  Various  authors,  commentators, 
academics,  and  strategists  have  discussed  the  changing,  volatile  nature 
of  the  world  and  the  possibility  of  further  and  future  conflict.  The  book 
Guiding  Principles  for  Stabilization  and  Reconstruction  describes  the  set- 
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ting:  "As  global  trends  indicate,  instability  is  likely  to  pose  greater,  and 
perhaps  more  numerous,  challenges  in  the  years  to  come”  (p.  1-2).  The 
United  States  Institute  of  Peace,  in  coordination  with  the  United  States 
Army  Peacekeeping  and  Stability  Operations  Institute,  brings  its  exten¬ 
sive  experience  to  bear  in  developing  a  manual  that  offers  a  frame¬ 
work  for  managing  effective  stabilization  and  reconstruction  operations. 

Beth  Cole,  of  the  United  States  Institute  of  Peace,  who  served  as  proj¬ 
ect  director  and  one  of  the  book's  two  lead  writers,  is  dean  of  institu¬ 
tional  affairs  at  the  United  States  Institute  of  Peace  Academy  for  Inter¬ 
national  Conflict  Management  and  Peacebuilding.  Prior  to  her 
employment  at  the  institute,  she  worked  at  the  State  Department  and 
with  George  Mason  University's  Program  on  Peacekeeping  Policy. 

The  manual  seeks  to  develop  strategic-level  guidelines  for  US  civil¬ 
ian  government  employees,  in  particular  those  who  may  deploy  in 
support  of  establishing  and  meeting  short-term  objectives  during  sta¬ 
bility  and  reconstruction  operations.  The  principles  combine  best  prac¬ 
tices  from  government  and  nongovernmental  organizations  (NGO)  and 
the  fruits  of  a  thorough  literature  review  of  various  military,  academic, 
and  private-sector  publications.  Given  the  absence  of  a  stability  and  re¬ 
covery  operations  manual— in  part  because  of  religious,  ethnic,  political, 
and  cultural  factors,  as  well  as  a  myriad  of  others— Guiding  Principles 
makes  a  valiant  effort,  in  a  scant  244  pages,  to  supply  the  hrst  strategic- 
level  guidelines  for  complex  stability  and  reconstruction  operations. 

For  this  accomplishment  alone,  Beth  Cole  and  the  entire  staff  deserve 
the  gratitude  and  attention  of  students,  scholars,  and  experts  in  secu¬ 
rity  studies  and  humanitarian  operations. 

The  guide  is  organized  into  easy-to-understand  sections,  including 
scope,  purpose,  principles,  fundamentals,  and  various  topical  areas 
(safe  and  secure  environment,  rule  of  law,  stable  governance,  sustain¬ 
able  economy,  and  social  well-being).  Additionally,  the  volume  offers 
several  well-sourced  appendices.  A  number  of  "cross-cutting  principles” 
that  can  apply  to  all  the  various  topical  areas  (called  "end  states”  in  the 
text)  include  host  nation  ownership  and  capacity,  political  primacy,  le- 
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gitimacy,  unity  of  effort,  security,  conflict  transformation,  and  regional 
engagement  (p.  2-9).  As  the  book  makes  apparent,  stability  and  recon¬ 
struction  operations  are  not  rooted  solely  in  military  operations. 

Rather,  operations  require  intergovernmental  coordination  that,  ac¬ 
cording  to  the  text,  has  been  lacking,  causing  people  to  ask,  "What  are 
we  trying  to  achieve?”  (p.  1-3).  Overall,  Guiding  Principles  blends  each 
of  the  various  topical  areas  into  a  central  thesis  in  an  attempt  to  an¬ 
swer  the  previous  question  as  well  as  "How  can  we  do  it?” 

Though  designed  as  a  guide  for  civilians  who  plan  for  and  respond  to 
stability  and  reconstruction  operations,  the  book  does  not  include  a 
historical  overview  of  civilian  leadership  and  resources  during  such 
operations,  which  would  have  proved  helpful.  Moreover,  several  guide¬ 
lines  seem  little  more  than  commonsense  anecdotal  statements— for 
example,  “act  only  with  an  understanding  of  the  local  context”  (p.  6-39) 
and  "anticipate  obstructionists  and  understand  their  motivations”  (p. 
6-43).  Additionally,  the  sole  mention  of  intelligence  occurs  in  the 
vague  statement  that  "intelligence  is  not  a  formal  or  acknowledged 
part  of  S<5tR  [stability  and  reconstruction]  missions.  Doctrinal  guidance 
and  cooperation  on  this  function  is  sorely  needed  to  ensure  that 
critical  information  is  collected  and  appropriately  shared”  (p.  6-60).  In 
a  strategic-level  guide  to  operations,  this  brief  mention  of  intelligence 
is  disappointing  and  naive.  Although  the  text  seems  to  narrowly  define 
intelligence  only  as  military  intelligence  in  a  security  environment,  it 
has  typically  been  defined  more  broadly  because  planners  and  special¬ 
ists  need  to  know  information  regarding  logistics,  supplies,  transporta¬ 
tion  routes,  locations,  political  leaders,  and  facilities. 

Readers  find  curiously  little  mention  of  successful  operations  in  the 
Balkans,  Iraq,  or  Afghanistan  and  only  a  limited  number  of  successful 
case  studies  that  include  examples  of  provincial  reconstruction  teams 
(PRT)  or  the  State  Department's  Civilian  Response  Corps.  However, 
the  appendices  offer  guidelines  and  lessons  learned  for  PRTs  and  other 
stability  operations.  The  book  remains  an  excellent  strategic  overview 
of  resources,  anecdotes,  and  basic  guidelines,  but  it  lacks  the  tactical 
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"on  the  ground”  focus  needed  for  NGOs  or  civilians  entering  conflict 
zones  who  are  preparing  to  assist  in  a  plethora  of  operations  ranging 
from  rebuilding  educational  institutions  to  developing  and  improving 
fragile  economies. 

Planning  specialists,  academics,  and  practitioners  will  find  the  guide¬ 
lines  useful.  However,  experienced  military  and  diplomatic  personnel 
may  consider  the  work  filled  with  too  many  commonsense  anecdotes. 
Guiding  Principles  would  serve  as  a  good  desk  reference  for  civilians 
deploying  to  conflict  zones  or  members  of  military  planning  staffs. 
Furthermore,  professors  might  recommend  it  as  an  excellent  hand¬ 
book  for  a  graduate-level  course  on  security  studies  or  peacekeeping. 
The  book  fulfills  its  purpose  of  "providing]  a  foundation  for  decision 
makers,  planners,  and  practitioners— both  international  and  host  na¬ 
tion— to  construct  priorities  for  specific  missions”  (p.  1-3).  1  intend  to 
keep  Guiding  Principles  on  my  shelf  and  will  continue  to  read  and  re¬ 
view  it  during  America’s  next  ventures  into  stability  and  reconstruc¬ 
tion  operations  across  the  globe. 

Bradley  Martin 

McDonough,  Georgia 


I  Could  Never  Be  So  Lucky  Again:  An  Autobiography  by  General 
James  H.  "Jimmy”  Doolittle  with  Carroll  Y.  Glines.  Schiffer  Publish¬ 
ing  (http:/ / www.schifferbooks.com/ newschiffer/ search_results.php), 
4880  Lower  Valley  Road,  Atglen,  Pennsylvania  19310,  1994,  622 
pages,  $29.99  (hardcover),  ISBN  9780887407376. 

In  his  autobiography,  Gen  James  H.  "Jimmy”  Doolittle  reflects  on 
his  more  than  90  years  of  living  on  this  earth,  proposing  that  “I  Could 
Never  Be  So  Lucky  Again.”  For  a  man  who  gained  recognition  as  one  of 
the  early  pioneers  of  American  aviation,  led  the  famous  raid  on  Tokyo 
in  1942,  received  the  Medal  of  Honor,  commanded  the  mighty  Eighth 
Air  Force  at  the  most  critical  time  of  the  European  air  campaign  dur¬ 
ing  World  War  II,  succeeded  as  a  business  executive,  and  witnessed  the 
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twentieth  century's  full  range  of  progress,  his  choice  of  a  title  for  his 
book  conveys  the  man's  genuine  humility,  notwithstanding  his  tre¬ 
mendous  accomplishments.  Ultimately  the  formula  works  well,  and 
Doolittle's  account  of  his  life  is  worthy  of  any  professional's  bookshelf 
for  its  history,  relevance,  and  personal  message.  For  someone  who  be¬ 
lieves  that  “if  a  man  leaves  the  earth  a  better  place  than  he  found  it, 
then  his  life  has  been  worthwhile''  (p.  539),  his  autobiography  repre¬ 
sents  a  fitting  coda  to  his  life  and  achievements. 

At  more  than  530  pages  of  narrative,  Doolittle’s  autobiography  is  a 
bit  long,  but  because  he  uses  simple  language  to  relate  his  accounts  in 
a  storytelling  style  and  paces  all  of  the  vignettes  effectively,  the  text 
reads  quickly  and  easily.  Even  in  his  advanced  years,  Doolittle's  recol¬ 
lection  remains  sharp  and  detailed— in  some  cases,  perhaps  too  much 
so.  Historians  and  aficionados  of  World  War  II  airpower  may  appreci¬ 
ate  the  detail,  but  others  may  not.  For  example,  the  intricate,  technical 
discussion  of  the  development  of  flight  instrumentation  in  the  late 
1920s  is  somewhat  distracting,  albeit  historically  significant.  In  this 
particular  case,  however,  Doolittle  regains  the  human  element  by 
interjecting  aspects  of  his  family  life.  In  fact,  he  employs  the  common 
literary  device  of  discussing  family  and  correspondence  throughout 
the  book  to  reinforce  the  very  personal  nature  of  his  undertaking. 

The  fact  that  many  lessons  drawn  from  Doolittle's  experiences  re¬ 
main  applicable  today  makes  his  story  keenly  relevant.  Some  people 
tend  either  to  forget  or  not  realize  that  the  interwar  years— and  cer¬ 
tainly  World  War  II— witnessed  some  of  the  most  rapid  development  of 
technology  in  history.  Doolittle  played  a  key  role  in  these  events,  rec¬ 
ognizing  then,  as  we  do  now,  the  importance  of  skill,  discipline,  tech¬ 
nical  knowledge,  and  the  constant  drive  to  continuously  test  the  limits 
of  performance,  design,  and  speed.  His  advocacy  of  high-octane  fuel 
when  conventional  wisdom  labeled  it  “Doolittle’s  Folly’’  (p.  191)  illus¬ 
trates  his  accurate  foresight  of  the  convergence  of  several  technological 
trends.  At  a  more  strategic  level,  his  entire  experience  in  the  European 
theater  during  the  war,  first  as  commander  of  Twelfth  Air  Force  and 
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then  of  Eighth  Air  Force,  provides  an  excellent  examination  of  the  pit- 
falls,  friction,  and  politics  of  joint  and  coalition  operations,  as  well  as 
the  burdens  of  expectation  assumed  by  commanders.  Doolittle  notes 
difficulties  with  the  media  and  prejudices  emanating  from  regular  of¬ 
ficers  (something  familiar  to  him  since  he  served  as  a  reservist). 
Throughout  the  book,  he  also  espouses  the  importance  of  the  people 
around  him,  especially  those  under  his  command.  For  example,  he 
characterizes  decorations  as  “such  a  small  payment,  for  such  a  large 
service”  (p.  365).  Today’s  professionals  can  use  these  and  several  other 
vignettes  as  touchstones  relevant  to  current  issues. 

One's  initial  impression  from  the  title  of  the  book,  given  Doolittle's 
well-known  raid  on  Tokyo  in  the  spring  of  1942,  is  that  it  refers  to  his 
success  in  bombing  Tokyo  and  producing  a  great  psychological  and 
strategic  victory  for  America  six  months  after  Pearl  Harbor.  Taken  as  a 
whole,  however,  the  book's  coverage  of  Doolittle's  life  demonstrates  his 
penchant  for  preparedness,  ingenuity,  courage,  and  resolve.  At  nearly 
every  turn  and  in  nearly  every  vignette,  the  narrative  resonates  with  a 
common  theme  of  “good  fortune  perched  on  the  cowl”  (p.  77).  In  light 
of  the  sheer  volume  of  Doolittle's  extraordinary  exploits,  the  reader  could 
easily  interpret  this  statement  as  an  instance  of  false  modesty  but  for 
the  fact  that  his  self-effacing  character,  humility,  goodwill,  and  grati¬ 
tude  course  throughout  the  book,  in  reference  not  only  to  his  profes¬ 
sional  successes  and  calculated  risk  taking  but  also  to  his  personal  life. 

Appropriately,  one  has  the  sense  that  this  story  is  in  fact  a  very  per¬ 
sonal  work.  Doolittle  shares  his  recollection  of  successes,  blunders, 
and  (what  he  considered  at  the  time)  abject  failures.  His  reflection  on 
how  he  felt  after  his  crash  landing  in  China  following  the  Tokyo  raid— 
his  sincere  belief  that  he  had  utterly  failed  and  that  his  aviation  career 
was  over— is  strikingly  telling  in  this  regard,  given  the  historical  signifi¬ 
cance  and  success  of  the  raid.  His  candor  and  humility  are  a  refreshing 
shift  from  much  of  the  biographical  material  available  on  famous  per¬ 
sonages— warriors,  especially— which  tends  to  parlay  no  shortage  of 
bravado  and  self-aggrandizement.  By  contrast,  in  August  1945  when 
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Doolittle  commanded  Eighth  Air  Force,  he  learns  of  the  imminent  Jap¬ 
anese  surrender  and  receives  word  from  higher  command  authorities 
that  “if  [he]  wanted  the  8th  Air  Force  bombers  to  be  in  combat  with  the 
Japanese,  [he]  had  better  get  an  operation  going”  (p.  454).  Doolittle  de¬ 
clined,  not  willing  to  risk  his  crews  or  cause  additional  casualties  and 
damage  just  so  the  Eighth  could  boast  that  it  had  bombed  both  Berlin 
and  Tokyo.  Additionally,  some  of  his  first  and  final  thoughts  express 
his  devotion  to  Joe,  his  beloved  wife  and  friend  for  over  70  years. 

Their  affection  for  each  other  and  their  family  through  all  of  the  tre¬ 
mendous  upheavals  of  the  interwar  years  and  the  war  itself  would  in¬ 
spire  any  military  couple  or  family.  Indeed,  in  this  regard  one  might 
even  interpret  the  subtext  of  the  narrative  as  a  love  story. 

In  sum,  Doolittle's  autobiography  is  very  enjoyable  and  a  highly  rec¬ 
ommended  candidate  for  one's  personal  or  professional  library.  It 
strikes  the  reader  as  a  very  high  horsepower,  candid,  and  detailed  his¬ 
torical  account  of  the  origins  of  American  airpower  and  the  life  of  one 
of  America's  greatest  Airmen.  We  come  to  know  this  Airman,  engineer, 
daredevil  pilot,  business  leader,  Medal  of  Honor  recipient,  general,  and 
(most  importantly,  as  the  subtext  reveals)  loving  husband  and  father. 
The  main  thread  of  the  narrative,  of  course,  recounts  Doolittle's  expe¬ 
riences  as  a  military  aviator.  However,  taken  in  total,  his  life  remains 
relevant  to  issues  facing  twenty-first-century  professionals.  Regardless 
of  the  reader's  profession,  I  Could  Never  Be  So  Lucky  Again  offers  valu¬ 
able  insights  from  a  man  who  actively  participated  in  the  birth  of  air- 
power,  served  as  a  critical  leader  in  the  conflagration  of  World  War  II, 
lived  through  the  beginning  and  end  of  the  Cold  War,  and  witnessed 
the  advent  of  modern  air  and  space  power  in  Operation  Desert  Storm. 
Doolittle  led  a  unique,  exciting,  and  successful  life,  owing  to  his  tre¬ 
mendous  inquisitiveness,  humility,  ingenuity,  confidence,  courage, 
and  resolve.  One  could  argue  it  was  not  he,  but  we,  who  were  lucky. 

Col  Darren  Buck,  USAFR 

Tyndall  AFB,  Florida 
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India,  Pakistan,  and  the  Bomb:  Debating  Nuclear  Stability  in 
South  Asia  by  Sumit  Ganguly  and  S.  Paul  Kapur.  Columbia  Univer¬ 
sity  Press  (http://cup.columbia.edu/),  61  West  62nd  Street,  New 
York,  New  York  10023,  2010,  152  pages,  $21.50  (hardcover),  ISBN 
978-0-231-14374-5;  $14.50  (softcover),  ISBN  978-0-231-14375-2. 

Part  of  a  10-volume  series  entitled  Contemporary  Asia  in  the  World 
published  by  Columbia  University  Press,  India,  Pakistan,  and  the  Bomb: 
Debating  Nuclear  Stability  in  South  Asia  provides  a  comprehensive  look 
at  the  nuclear  programs  of  India  and  Pakistan  and  examines  whether 
these  programs  stabilize  or  destabilize  the  region.  The  book's  most  in¬ 
teresting  feature  is  that  the  authors  actively  debate  this  particular  ef¬ 
fect  of  nuclear  weapons,  especially  with  regard  to  the  relationship  be¬ 
tween  India  and  Pakistan.  Both  Ganguly  and  Kapur  have  published 
other  works  on  these  two  countries  and  have  knowledge  of  and  experi¬ 
ence  in  writing  about  the  politics  of  South  Asia.  Although  most  other 
such  studies  present  only  one  perspective  of  nuclear  stability,  these 
authors  take  opposite  sides  of  the  argument  and  debate  each  other 
throughout  the  work,  thus  giving  the  reader  a  complete  picture  and 
understanding  of  the  possible  outcomes  of  a  nuclear  South  Asia. 
Whereas  Ganguly  takes  the  position  that  nuclear  weapons  have  had  a 
stabilizing  effect  on  the  relationship  between  India  and  Pakistan, 

Kapur  maintains  that  they  have  destabilized  the  South  Asia  security 
environment  writ  large  and  will  continue  to  do  so.  Both  attempt  to  lay 
out  their  positions  succinctly  and  logically.  They  supply  a  historical 
framework  for  the  countries'  relationship  before  nuclear  weapons  en¬ 
tered  the  picture,  showing  how  the  two  nations  evolved  following  Brit¬ 
ish  colonialism.  Ganguly  and  Kapur  then  introduce  their  competing 
frameworks,  each  of  which  addresses  how  nuclear  weapons  have  al¬ 
tered  India's  and  Pakistan's  dealings  with  each  other.  The  time  periods 
analyzed  by  the  authors  include  1980  to  2002,  2002  to  2007,  and  2008 
to  the  present. 

On  the  one  hand,  Ganguly  optimistically  asserts  that  nuclear  weap¬ 
ons  have  produced  a  stabilizing  effect,  especially  in  the  sense  that 
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each  nation's  nuclear  deterrence  has  limited  military  responses  during 
conflicts.  Kapur,  on  the  other  hand,  argues  for  strategic  pessimism, 
pointing  out  that  aggressive  behavior  by  a  new  nuclear  power  leads  to 
regional  destabilization.  For  him,  nuclear  weapons  in  India  and  Paki¬ 
stan  have  had  this  effect  in  South  Asia  because  of  their  potential  to  es¬ 
calate  any  conflict  between  the  two  countries. 

A  short  case  study  on  the  Kashmir  conflict  of  1990  helps  illustrate 
each  man's  position.  Ganguly  argues  that  during  this  incident,  even 
though  India  and  Pakistan  increased  their  military  presence  around 
Kashmir,  the  situation  did  not  escalate  because  each  understood  the 
other's  nuclear  capabilities  and  did  not  wish  to  risk  possible  nuclear 
war.  Kapur  declares  that  Pakistan's  incursion  into  Kashmir  occurred 
because  nuclear  weapons  gave  it  the  confidence  to  challenge  the  status 
quo  in  Kashmir  more  aggressively,  thereby  destabilizing  the  region. 
Such  instability  was  inevitable  because  Pakistan  believed  that  its  nu¬ 
clear  deterrence  would  keep  India  from  elevating  the  Kashmir  incur¬ 
sions  to  an  all-out  military  conflict,  allowing  Pakistan  to  assume  a 
more  aggressive  military  posture  vis-a-vis  India.  This  case  study  is  just 
one  of  the  many  examples  offered  by  the  authors  to  illustrate  their  po¬ 
sition  on  how  nuclear  weapons  have  affected  the  relationship  between 
India  and  Pakistan. 

Anyone  interested  in  the  politics  and  nuclear  stability  of  India  and 
Pakistan  will  find  this  short  work  easy  to  understand  and  read.  Its  in¬ 
clusion  of  a  brief  historical  background  helps  the  authors  clarify  their 
arguments  and  supplies  a  context  for  understanding  the  complex  rela¬ 
tionship  between  the  two  nations.  Because  India,  Pakistan,  and  the 
Bomb  has  far-reaching  applications,  any  military  member  deploying  to 
US  Central  Command  would  benefit  from  the  larger  lessons  that  ac¬ 
crue  from  an  understanding  of  the  India/Pakistan  relationship— such 
as  the  implications  of  an  Iranian  nuclear  program.  As  someone  who 
followed  Ganguly's  line  of  thinking  prior  to  reading  this  book,  I  must 
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say  that  it  led  me  to  reconsider  my  beliefs  about  the  effect  of  nuclear 
weapons  on  South  Asia. 

Maj  Joseph  M.  Ladymon,  USAF 

Nellis  AFB,  Nevada 


Such  Men  As  These:  The  Story  of  the  Navy  Pilots  Who  Flew  the 
Deadly  Skies  over  Korea  by  David  Sears.  Da  Capo  Press  (Perseus 
Books  Group)  (http://www.perseusbooksgroup.com/dacapo/home 
.jsp),  387  Park  Avenue  South,  12th  Floor,  New  York,  New  York 
10016,  2010,  432  pages,  $25.00  (hardcover),  ISBN  9780306818516; 
2011,  $18.00  (softcover),  ISBN  9780306820106. 

Carrier  aviation  played  an  important  role  in  the  Korean  air  war,  add¬ 
ing  more  weight  to  the  American  air  effort  as  well  as  offering  a  num¬ 
ber  of  other  advantages.  It  filled  in  for  range-limited  Air  Force  aircraft, 
especially  early  in  the  war  when  South  Korean  airfields  were  unsuit¬ 
able  for  Air  Force  jets.  Moreover,  throughout  the  conflict,  carrier  avia¬ 
tion  furnished  support  against  targets  in  northeastern  Korea.  Navy  and 
Marine  Airmen  provided  close  air  support  superior  to  that  of  the  Air  Force 
in  terms  of  accuracy,  rapidity  of  response,  loiter  time,  and  proximity  to 
friendly  forces— and  with  fewer  incidents  of  friendly  fire.  However,  the 
Air  Force  flew  2.5  times  as  many  combat  sorties  as  did  the  carrier  avia¬ 
tors,  fighting  and  winning  the  most  celebrated  and  best  remembered 
aspect  of  the  Korean  air  war— the  battle  for  air  superiority.  These  fac¬ 
tors,  coupled  with  the  newly  formed  Air  Force's  push  for  its  place  in 
the  military  establishment,  have  resulted  in  the  junior  service's  domi¬ 
nating  the  literature  of  the  Korean  air  war. 

David  Sears's  Such  Men  As  These  will  help  correct  this  imbalance.  He 
has  quite  a  story  to  tell.  The  aviators  flew  off  World  War  II  carriers  and 
employed  mainly  propeller-powered  aircraft  of  that  same  vintage  in 
the  fight.  The  jets  flew  one-third,  the  stalwart  World  War  II-era  F4U 
two-hfths,  and  the  World  War  II-designed  AD  one-quarter  of  the  carrier 
combat  sorties.  They  operated  in  a  tough  climate,  over  rugged  terrain, 
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and  against  considerable  ground  fire.  Further,  the  pilots  reaped  little 
glory,  for  unlike  the  situation  in  World  War  II,  Korea  offered  no  ships 
of  size  to  engage  and  few  aerial  victories.  (Navy  aviators  claimed  13 
enemy  aircraft  destroyed  for  five  Navy  and  Marine  aircraft  lost  in  air- 
to-air  combat.)  Carrier  aviators  logged  about  the  same  number  of  sorties 
as  in  World  War  II  although  they  dropped  three-quarters  more  bombs. 

The  book  tells  the  story  of  life  on  the  carriers  and  the  air  battle  as 
seen  by  Navy  aviators.  (Marine  carrier  Airmen  are  not  included.)  The 
author  uses  an  anecdotal  approach,  writing  of  the  Airmen's  back¬ 
ground,  exploits,  and  postwar  experiences.  He  seeks  “to  tell  human 
stories  against  the  backdrop  of  history”  (p.  349),  and  he  does  so  quite 
well.  The  narrative  includes  not  only  the  constant  struggle  but  also  the 
exciting  moments— combat,  death  and  damage,  and  accidents  (some 
fatal,  some  not).  Sears  makes  clear  that  the  carrier  air  war  in  Korea  was 
a  factory-like  process,  day  in  and  day  out,  unlike  the  peak-and-valley 
tempo  of  World  War  II  operations.  He  is  candid  and  not  always  compli¬ 
mentary.  Along  the  way,  he  describes  James  Michener's  service  as  a 
war  correspondent  and  the  genesis  of  his  classic  book  The  Bridges  at 
Tbko-ri,  the  semifictional  account  of  this  action,  including  the  models 
for  Michener's  fictional  characters  in  the  novel.  (The  title  of  Sears's 
book  is  a  paraphrase  from  Michener’s.)  Sears  includes  fighter  pilots  as 
well  as  attack  and  helicopter  crews  (those  who  made  it  back  safely  as 
well  as  those  who  did  not)  in  all  elements  of  the  story— on  shore;  pre¬ 
flight;  during  launch,  attack,  recovery,  and  rescue;  and  postwar.  The 
author  does  an  excellent  job  of  showing  the  flavor  of  the  carrier  air  war 
from  the  individual's  viewpoint. 

Readers  seeking  more  will  be  disappointed.  Although  Sears  covers 
the  entire  war  in  adequate  (perhaps  too  much)  detail,  he  devotes  little 
attention  to  the  aircraft  or  tactics  employed  and  includes  no  analysis 
or  general  wrap-up.  Written  for  a  popular  audience,  the  book  in  gen¬ 
eral  is  an  easy  read,  but  it  provides  few  footnotes  (and  lacks  citations 
even  for  direct  quotations.)  Some  readers  may  find  some  of  the  vignettes 
drawn  out,  such  as  the  Medal  of  Honor  story  regarding  Tom  Hudner 


January-February  2013 


Air  &  Space  Power  Journal  \  210 


V  BOOKREVIEWS 


(who  attempts  to  rescue  Jesse  Brown,  the  first  African-American  naval 
aviator)  and  another  aviator's  extended  experience  as  a  prisoner  of  war. 

I  highly  recommend  Such  Men  As  These  for  readers  interested  in  the 
human  side  of  the  carrier  air  war  in  Korea.  (For  balance,  I  suggest  that 
they  also  read  The  Naval  Air  War  in  Korea,  Richard  Hallion's  more  tra¬ 
ditional  and  analytical  version  of  the  subject.)  David  Sears  has  pro¬ 
duced  an  impressive  book  that  adds  to  our  knowledge  of  the  air  war  in 
Korea.  It  shows  American  Airmen  at  their  best  in  the  neglected  story 
of  naval  aviation  during  that  frustrating  and  difficult  conflict. 

Kenneth  P.  We r re  11 

Christiansburg,  Virginia 
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